Head of Platform Engineering

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

IMP Software

WebsiteLinkedInAll Job Openings

51 - 200 employees

☁️ SaaS

🏢 Enterprise

SaaS • Enterprise

IMP Software is a company focused on providing software development services and solutions. The company operates remotely with a focus on consulting, software engineering, and development roles, mainly in the UK. It offers a platform for users to manage cookies and data privacy, indicating a commitment to compliance with privacy standards and ensuring a user-friendly online experience. IMP Software is involved in analytics to optimize their services and enhance customer experience.

📋 Description

• Own Azure infrastructure end to end: subscriptions, networking, edge (Azure Front Door with WAF and CDN), Azure Container Apps, ingress, secrets, identity, and the base services everything sits on • Standardise infrastructure-as-code using Terraform/OpenTofu, with all changes Git-driven, reviewable and increasingly AI-assisted • Build a self-service developer platform that abstracts infrastructure complexity so engineering teams can focus on their products: service templates, starter repos, CI/CD pipelines and deployment automation • Create the guardrails that let AI-first teams move at speed without losing control: policy-as-code, automated quality gates and security scanning in pipelines • Work closely with the Lead Architect and the Architecture Working Group on platform architecture choices and create/maintain suitable platform documentation. • Design, build and operate deep observability and alerting across the platform, so problems are spotted and triaged early • Set and operate to clear platform/infrastructure reliability and performance targets, with a proactive approach to capacity management • Lead platform incident management: act as incident commander when needed, run blameless post-mortems and make sure remediation lands • Design for high availability and disaster recovery, with rehearsed recovery procedures • Own cloud and AI cost governance: spend, environment hygiene, and visibility on model and agent usage • Own the platform security posture end to end: identity and access, network segmentation, secrets, data protection, and vulnerability management, working with the Head of IT on corporate-side controls and cross-boundary incidents • Enforce zero-trust and private-by-default across the platform: managed identities everywhere, no long-lived keys or passwords, private networking with edge-only public entry, and least privilege as the default • Embed security into pipelines and infrastructure: SAST, DAST, SCA, IaC scanning, container image scanning, secrets scanning, and policy-as-code gates that block on critical findings • Own vulnerability management and threat detection for the platform: patching SLAs, CVE triage, Microsoft Defender for Cloud, security event aggregation, and evidence for audit and compliance (Cyber Essentials, UK GDPR) in partnership with the Head of IT • Design guardrails for AI-specific security risks: prompt injection defence, agent permission boundaries, and preventing model exposure to sensitive tenant data • Manage and develop the existing DevOps team, growing it into a high-impact Platform Engineering function • Set the operating model: how the Platform team works with product squads, what it owns, and how it prioritises • Shift the culture from ticket-taking DevOps to Platform as a Product, serving internal customer teams

🎯 Requirements

• 5+ years running production SaaS systems, including incident ownership and response • Expert in Azure as our core cloud, with hands-on experience across Azure Container Apps, Azure Database for PostgreSQL and SQL Server, Azure Front Door (with WAF, CDN and managed certificates), Azure Service Bus, Cache for Redis, Key Vault, App Configuration, Blob Storage and Application Insights • Strong containerisation skills and Azure networking, with hands-on experience of Azure Container Apps (or equivalent managed container platforms) • Expert in infrastructure-as-code using Terraform/OpenTofu, with Azure DevOps and Git-based workflows • Strong observability and alerting: hands-on with OpenTelemetry and Application Insights, able to design, build and operate the depth of telemetry needed to run a mission-critical SaaS platform, with a proactive approach to capacity management • Hands-on experience with AI developer tooling (Claude Code, Copilot, Codex or similar), with a clear view on where AI accelerates platform work and what guardrails matter • Hands-on with multi-tenant SaaS isolation patterns (row-level security, shared-schema tenant partitioning, per-tenant storage containers, tenant-scoped cache keys) • Deep security experience for cloud SaaS: identity and access, network segmentation, secrets management, pipeline security (SAST, DAST, SCA, image and IaC scanning), vulnerability management and threat detection. Secure-by-design mindset, comfortable being personally accountable for the platform’s security posture • Track record of managing a team’s workload while mentoring and growing engineers • Strong communicator, comfortable working with product, engineering leadership and senior stakeholders

🏖️ Benefits

• Competitive salary and benefits package • Fully remote role • The chance to build and shape a platform engineering function at a pivotal moment for the business • Funded CPD and professional development • Regular team socials and company events • Work with a passionate team solving real problems for the education sector