Job Summary
Cloud Platform Engineering & Accountability Own the design and operation of AWS native platform capabilities across networking, compute, storage, and foundational services. Define, evolve, and govern standardised onboarding patterns for applications and integrations on AWS CNE. Design resilient, multi region platform architectures aligned to availability, recoverability, and regulatory expectations. Drive continuous improvement of platform reliability, scalability, and technical sustainability. Networking & Secure Connectivity Lead the design and implementation of enterprise grade connectivity patterns including VPC, Transit Gateway, and PrivateLink. Own private DNS and service resolution architectures using Route53 and resolver patterns. Ensure network designs align with Group security, segmentation, and firewall standards. Act as a senior technical specialist for secure, private connectivity across AWS and hybrid environments. Platform Automation & Engineering Excellence Lead Infrastructure as Code design using Terraform and/or CloudFormation. Drive automation and standardisation through CI/CD integration and platform tooling. Enable scalable, self service onboarding through approved templates, pipelines, and patterns. Promote DevOps and platform engineering best practices across AWS CNE. Security, Risk & Compliance by Design Embed security by design principles into all platform capabilities. Enforce IAM least privilege access, encryption using KMS, and secure secrets management. Lead platform contributions to audit readiness, risk remediation, and regulatory assurance. Partner with security and risk teams to align with Group governance frameworks.
Key Responsibilities
Operational Resilience & Observability Own the operational health of AWS CNE infrastructure and services. Define and enhance observability using CloudWatch, Dynatrace, and Splunk. Lead incident response, root cause analysis, and resilience improvements. Drive Optimisation of cost, performance, and utilization across the platform. Container & Kubernetes Platform Enablement Provide senior level engineering support for Amazon EKS as a strategic platform capability. Define secure, scalable deployment and access patterns for container platforms. Contribute to cluster lifecycle management and access control models. Partner with application teams to enable safe and consistent Kubernetes adoption. Data & Integration Enablement Enable secure data transfer and integration patterns using S3, DataSync, and event driven services. Support integration with SaaS, PaaS, and enterprise platforms through standardised patterns. Ensure end to end integration flows are secure, resilient, and observable. Collaboration, Standards & Influence Act as a recognized technical authority within AWS CNE. Influence platform strategy, design standards, and engineering decisions. Participate in change, onboarding, and governance forums. Coach and mentor engineers, raising engineering standards across the platform.\" \"1. Manage AWS SaaS Hub for the Bank, including all central/core components and shared services.
Skill Requirements
2. Oversee central components for DRE, Pega, AMITC, NPA, E2Vault, SCA, and related AWS accounts. 3. Configure and maintain AWS security services aligned with Bank security and compliance standards. 4. Handle incident, problem, and change management for AWS shared services and networking components. 5. Assess new projects, onboard them to AWS SaaS Hub, and provision accounts and shared services. 6. Ensure annual compliance for KMS key rotation, IAM, and Lloyds Cloud Control Framework (LCCF). 7. Manage performance, capacity, cost control, privileged identity, and F5 infrastructure in AWS Hub. 8. Collaborate with GCIO for F5 updates, port configurations, and maintain third-party connectivity.\"
Other Requirements
2. Oversee central components for DRE, Pega, AMITC, NPA, E2Vault, SCA, and related AWS accounts. 3. Configure and maintain AWS security services aligned with Bank security and compliance standards. 4. Handle incident, problem, and change management for AWS shared services and networking components. 5. Assess new projects, onboard them to AWS SaaS Hub, and provision accounts and shared services. 6. Ensure annual compliance for KMS key rotation, IAM, and Lloyds Cloud Control Framework (LCCF). 7. Manage performance, capacity, cost control, privileged identity, and F5 infrastructure in AWS Hub. 8. Collaborate with GCIO for F5 updates, port configurations, and maintain third-party connectivity.\"