Cloud Platform Engineer (IaC, Network & Security Operations)
Serco Group plc17 days ago
Prague, CzechiaSenior
Responsibilities
- Implement and maintain Azure infrastructure as code across environments.
- Build and operate AKS clusters, networking, and shared platform services.
- Operate and troubleshoot Azure and hybrid network services, including VNets, routing, DNS, VPN, ExpressRoute, Private Link, and network security controls.
- Develop and maintain CI/CD pipelines and GitOps deployment workflows.
- Implement observability, alerting, operational automation, autoscaling, right-sizing, and scale-to-zero patterns.
- Operate Azure Firewall, Application Gateways, Front Door, Defender, and mail authentication controls including SPF, DKIM, and DMARC.
- Own vulnerability management, including identification, assessment, prioritization, reporting, and remediation follow-up.
- Operate security monitoring, investigate alerts and incidents, and support containment, eradication, recovery, and lessons learned.
- Perform technical security assessments, security health checks, infrastructure change reviews, and technical remediation coordination.
- Implement security controls, support audits and compliance activities, monitor emerging threats, and maintain operational security documentation and standards.
- Track reduction of technical security debt, incident resolution, monitoring improvements, and remediation reporting.
Requirements
- Strong hands-on Azure cloud and platform engineering experience.
- Proficiency with infrastructure as code using Terraform or Bicep.
- Production Kubernetes or AKS operations experience.
- CI/CD and GitOps experience with Azure DevOps or GitHub Actions.
- Scripting and automation skills using technologies such as Python, PowerShell, or Bash.
- Strong enterprise and Azure networking knowledge, including TCP/IP, DNS, routing, VPNs, firewalls, VNets, peering, and hybrid connectivity, with hands-on troubleshooting experience.
- Experience in cybersecurity operations, security engineering, or equivalent technical security responsibilities.
- Strong understanding of vulnerability management and technical security assessment practices.
- Experience with security monitoring, SIEM, and incident response.
- Understanding of network security, system hardening, and secure configuration practices.
- Ability to analyze technical security risks and communicate findings to technical and non-technical stakeholders.
- Preferred experience operating platforms for AI or data workloads, advanced Azure networking, FinOps tooling, audits, compliance remediation, Microsoft security technologies, endpoint protection, and identity security.
About Serco Group plc
Serco Group plc delivers outsourced public services and technology-enabled operations for governments worldwide, spanning defence, justice, migration, health, transport, space, and customer services. It designs, integrates and manages large programmes, contact centres, and facilities under long-term contracts, with capabilities in systems integration, case management, and complex programme management. Headquartered in Hook, Hampshire, the company is publicly listed on the London Stock Exchange.