To drive real impact in this role, you will:

• Own the Cloud Platform: Design, build and operate our multi-account AWS environments, with Terraform as the backbone for every change, from modules to drift detection to plan-and-review
• Build the Paved Road: Own CI/CD in GitHub Actions and build boilerplates for .NET, Go and Python so teams can ship standardised, production-ready environments with minimal friction
• Engineer Security In: Apply least-privilege IAM, secrets management, network controls and CSPM tooling like Wiz, and embed scanning and policy-as-code directly into pipelines
• Automate Compliance: Build continuous evidence and controls against SOC 2, ISO 27001 and the AWS Well-Architected Framework, so audit readiness is always on, not a scramble
• Own Observability and Reliability: Run the CloudWatch stack, define SLOs, lead incident response and post-incident reviews, and keep runbooks sharp enough for another engineer to follow
• Lead Without the Title: Set platform standards, review infrastructure and pipeline changes from other engineers, mentor the team on cloud and security practice and help shape the roadmap
• Partner Across the Business: Work closely with Infrastructure and Security, Product Engineering squads and Trading Platform Operations to keep the estate secure, resilient and easy to build on
• 
  

To drive real impact in this role, you will:

• Own the Cloud Platform: Design, build and operate our multi-account AWS environments, with Terraform as the backbone for every change, from modules to drift detection to plan-and-review
• Build the Paved Road: Own CI/CD in GitHub Actions and build boilerplates for .NET, Go and Python so teams can ship standardised, production-ready environments with minimal friction
• Engineer Security In: Apply least-privilege IAM, secrets management, network controls and CSPM tooling like Wiz, and embed scanning and policy-as-code directly into pipelines
• Automate Compliance: Build continuous evidence and controls against SOC 2, ISO 27001 and the AWS Well-Architected Framework, so audit readiness is always on, not a scramble
• Own Observability and Reliability: Run the CloudWatch stack, define SLOs, lead incident response and post-incident reviews, and keep runbooks sharp enough for another engineer to follow
• Lead Without the Title: Set platform standards, review infrastructure and pipeline changes from other engineers, mentor the team on cloud and security practice and help shape the roadmap
• Partner Across the Business: Work closely with Infrastructure and Security, Product Engineering squads and Trading Platform Operations to keep the estate secure, resilient and easy to build on
•