Job Summary

Enable safe, repeatable and observable delivery of Treasury workloads on GCP.

Role accountabilities

• Create and maintain CI/CD pipelines, deployment automation, artefact management and environment promotion controls.
• Implement infrastructure as code and reusable GCP runtime patterns for UI, APIs, data and orchestration workloads.
• Embed automated testing, code quality, security scanning and policy checks into delivery flows.
• Provide central logging, metrics, traces, alerting and operational dashboards.
• Engineer IAM, secrets, encryption, network controls, mTLS and least-privilege access with security specialists.
• Design for high availability, autoscaling, backup, disaster recovery, resilience and cost optimisation.
• Support environment provisioning, release management, incident response and service recovery.
• Improve developer experience through paved roads, self-service capabilities and clear operational documentation.

Core skills and experience

• GCP platform engineering and production operations.
• CI/CD tooling, containers, infrastructure as code and artefact management.
• Cloud Run and relevant managed-service deployment patterns.
• Observability, SRE practices, alert design and incident management.
• IAM, network security, secrets and secure software supply chain controls.
• Automation using suitable scripting and configuration languages.
• Experience supporting data pipelines, APIs, web applications and event-driven services.

Leadership expectations

• Lead by enabling teams rather than controlling every deployment.
• Make reliability, security and cost risks visible and actionable.
• Coach teams in operational ownership, runbooks and incident learning.
• Drive standards through reusable automation and sensible defaults.
• Coordinate calmly across engineering, security and service-management groups during issues.

Productivity and delivery expectations

• Reduce manual provisioning and deployment effort through self-service automation.
• Optimise pipeline speed and reliability while preserving control evidence.
• Use deployment frequency, lead time, failure rate, recovery time, toil and service health as team learning measures.
• Remove recurring operational work and bottlenecks through root-cause improvement.

Expected behaviours

• Service-minded, responsive and collaborative.
• Automation-first and intolerant of avoidable toil.
• Security-conscious and proportionate.
• Calm, transparent and learning-focused during incidents.
• Accountable for operability and developer experience.

Evidence of effectiveness

• Repeatable environment and deployment processes with auditable controls.
• Reliable pipelines and fast feedback to engineers.
• Actionable observability and tested recovery procedures.
• Reduced manual toil, deployment risk and time to restore service.

Desirable domain experience

• Regulated cloud delivery and separation-of-duties controls.
• Apigee X, Kafka, BigQuery, Cloud Composer and Cloud SQL operations.
• FinOps and capacity optimisation for analytical workloads.

Key Responsibilities

Enable safe, repeatable and observable delivery of Treasury workloads on GCP.

Role accountabilities

• Create and maintain CI/CD pipelines, deployment automation, artefact management and environment promotion controls.
• Implement infrastructure as code and reusable GCP runtime patterns for UI, APIs, data and orchestration workloads.
• Embed automated testing, code quality, security scanning and policy checks into delivery flows.
• Provide central logging, metrics, traces, alerting and operational dashboards.
• Engineer IAM, secrets, encryption, network controls, mTLS and least-privilege access with security specialists.
• Design for high availability, autoscaling, backup, disaster recovery, resilience and cost optimisation.
• Support environment provisioning, release management, incident response and service recovery.
• Improve developer experience through paved roads, self-service capabilities and clear operational documentation.

Core skills and experience

• GCP platform engineering and production operations.
• CI/CD tooling, containers, infrastructure as code and artefact management.
• Cloud Run and relevant managed-service deployment patterns.
• Observability, SRE practices, alert design and incident management.
• IAM, network security, secrets and secure software supply chain controls.
• Automation using suitable scripting and configuration languages.
• Experience supporting data pipelines, APIs, web applications and event-driven services.

Leadership expectations

• Lead by enabling teams rather than controlling every deployment.
• Make reliability, security and cost risks visible and actionable.
• Coach teams in operational ownership, runbooks and incident learning.
• Drive standards through reusable automation and sensible defaults.
• Coordinate calmly across engineering, security and service-management groups during issues.

Productivity and delivery expectations

• Reduce manual provisioning and deployment effort through self-service automation.
• Optimise pipeline speed and reliability while preserving control evidence.
• Use deployment frequency, lead time, failure rate, recovery time, toil and service health as team learning measures.
• Remove recurring operational work and bottlenecks through root-cause improvement.

Expected behaviours

• Service-minded, responsive and collaborative.
• Automation-first and intolerant of avoidable toil.
• Security-conscious and proportionate.
• Calm, transparent and learning-focused during incidents.
• Accountable for operability and developer experience.

Evidence of effectiveness

• Repeatable environment and deployment processes with auditable controls.
• Reliable pipelines and fast feedback to engineers.
• Actionable observability and tested recovery procedures.
• Reduced manual toil, deployment risk and time to restore service.

Desirable domain experience

• Regulated cloud delivery and separation-of-duties controls.
• Apigee X, Kafka, BigQuery, Cloud Composer and Cloud SQL operations.
• FinOps and capacity optimisation for analytical workloads.

Skill Requirements

Other Requirements