Senior Cloud Engineer AWS/Multiple

Working at CreateFuture CreateFuture is an AI-native consulting partner where people do work that matters and are supported to do it well. We work alongside organisations such as PayPal, adidas, NatWest, FanDuel and Money Saving Expert, building digital products and services that make a difference  while always putting people first. We’re a team of creators. We write code, shape delivery, build go-to-market strategies, develop AI solutions and create the practices that support our people. We work side by side with our clients, challenging what’s not working and helping them to build the future. Our commitment to craft, quality, and culture has helped us scale to over 600 people in just a few years. Our UK Benefits  * 35 days leave (including bank holidays).  * Private medical insurance. * Enhanced parental and adoption leave.  * Financial coaching + 5% pension match. * 40 hours of paid learning and development.  View our full list of UK benefits.  CreateFuture is a Great Place to Work-Certified™ company and has won Best Workplaces UK multiple years in a row. Join us on our journey. Let’s create tomorrow, together, today. A hands-on senior engineer embedded in the client's platform team, responsible for the reliability, scalability, and evolution of their Kubernetes-based infrastructure on AWS. This role sits at the intersection of platform engineering and DevOps, owning the day-to-day health of containerised workloads while driving improvements to delivery pipelines, GitOps practices, and managed service configuration. The right candidate is comfortable working autonomously in a mature, opinionated stack and can influence without authority across engineering teams. Key Responsibilities * Own the operational health and evolution of containerised workloads running on EKS, including Helm chart management and Kustomize-based environment configuration * Drive GitOps practices using Flux, maintaining, improving, and troubleshooting the reconciliation pipeline across environments * Manage and optimise core managed services: EKS, MSK, and RDS, including scaling, patching, cost governance, and incident response * Maintain and extend infrastructure-as-code using Terraform, ensuring consistency, modularity, and alignment with AWS best practices * Support and improve GitHub Actions CI/CD workflows, including build, test, and deployment pipelines for containerised applications * Collaborate with development teams to support the hosting, debugging, and performance of Java/Kotlin and Python-based services * Identify and address platform-level technical debt, contributing to a roadmap of incremental improvements * Support on call for the EKS platform. Skills & Experience * Kubernetes at production scale, EKS preferred, with strong understanding of networking, RBAC, resource management, and cluster operations * GitOps tooling, Flux (essential), with solid working knowledge of Helm and Kustomize * AWS managed services, hands-on experience with EKS, MSK, and RDS in production environments * Terraform, authoring and maintaining modular infrastructure-as-code across multiple environments * GitHub Actions, building and maintaining CI/CD pipelines for containerised workloads * Application-layer awareness, ability to support and troubleshoot Java/Kotlin and/or Python services running in containers * Strong operational mindset, comfortable with on-call responsibilities, incident management, and root cause analysis WHAT WE’LL OFFER YOU: We trust people to do their best work. That means flexibility over rigid rules, impact over activity, and real investment in your growth both professionally and personally. You’ll be part of a supportive, and friendly culture, surrounded by smart, curious people who care deeply about what they do. We offer flexible working, including hybrid and remote options. Our office hubs are located in Edinburgh, Leeds, Manchester, London and Bulgaria, with occasional travel to client sites or CreateFuture offices when needed. We trust you to manage your time balancing collaboration with client time and focused work. What matters is the impact you have, not how busy you look. OUR HIRING PROCESS We try to keep our hiring process clear, fair and respectful of your time. We aim to get back to everyone who applies and we will be upfront about where you are in the process. It usually looks like this: * Call with our Talent Acquisition Team  * Role specific capability interview  Depending on the role, we might also ask you to do a short presentation, a practical or technical task or have a values focused conversation. We will explain what is involved before anything happens. INCLUSION AT CREATEFUTURE  We believe diverse teams build better workplaces and better products. We want CreateFuture to be a place where people feel able to be themselves and do their best work. If you need any adjustments or support during the application process, just. We will do what we can to help. We look forward to your application!

Hello. We’re Teya. Teya was founded on a simple belief: local businesses deserve better. They are the cafés, restaurants, salons, shops and entrepreneurs that bring character to our high streets, create jobs and keep communities moving. Yet for too long, financial services has made life harder for them - with clunky tools, poor support and complexity that gets in the way of running a business. Teya exists to change that. We’re building a financial platform for local businesses across Europe - one built around simple tools, thoughtful design and real human support. Our Members rely on us to help them run their business with confidence, and that responsibility shapes the way we work. We move fast. We care about quality. We stay close to the detail. And we believe great performance and genuine hospitality should go hand in hand. If you want to build meaningful products, solve real problems and make a genuine difference for local businesses, we’d love to hear from you YOUR MISSION We're a regulated payments fintech operating across multiple European markets, scaling into banking-licence territory. Security Engineering is being rebuilt around a joint operating model with our platform and infrastructure teams. We're hiring a Senior Security Engineer who can pick up specific gaps in our current coverage: payment cryptography operations on cloud-hosted HSM services, application security at scale, and pipeline-embedded controls that let the rest of the company move fast without security sitting in the critical path. This is not a review-queue role. We're not looking for another pair of hands doing manual pen tests, PR reviews, or spreadsheet audits. We want an engineer who builds, someone who writes production-quality Go, ships services, and turns manual security work into platforms other teams operate against. RESPONSIBILITIES * Design, implement, and continuously improve a Secure SDLC integrated from design through production * Embed security into planning and delivery via threat modelling, security requirements, and automated controls * Lead application security reviews for new systems, major features, and high-risk changes across web, API, mobile, and backend services * Define and maintain secure architecture patterns for authentication, authorisation, APIs, data protection, and multi-tenant isolation * Own the application security tooling stack (SAST, DAST, SCA), integrating it into CI/CD with high-signal, low-noise outputs * Partner with engineers to triage and remediate vulnerabilities based on exploitability, impact, and regulatory risk * Work with Security Operations to improve application-level logging, telemetry, and incident response readiness * Act as a trusted advisor to engineering teams, raising the bar through practical guidance, documentation, and targeted training REQUIREMENTS * 5+ years in security engineering. With a demonstrable track record of shipping platforms, not just performing reviews or writing policy. * Production Go experience. You should be comfortable designing, writing, testing, and shipping production Go services. Our platform is Go-native and we build our security tooling in the same stack. Applications without production Go will not progress. * Software engineering fundamentals. Version control, code review, testing, CI/CD, observability, on-call for services you've built. You are an engineer who does security, not a security person who occasionally scripts. * Payment cryptography operations. Hands-on experience with payment HSM services (cloud- hosted such as VirtuCrypt, AWS CloudHSM, Google Cloud HSM; or on-prem operated as a service). Payment key management including PIN keys, DUKPT, master/session key hierarchies, and TR-31 or TR-34 key exchange. * Experience with key lifecycle management, PCI PIN and PCI-DSS scope experience is required. * Application security at scale. SAST/DAST/SCA toolchain design and rollout. Threat modelling as a routine practice, not an event. Familiarity with modern AppSec tooling (Snyk, Wiz, Veracode, Checkmarx, Semgrep, GitHub Advanced Security or equivalents). * Cloud security depth on AWS. IAM design, workload identity, network isolation, and integration patterns between application workloads and HSM-backed key services. * Written communication. You will publish runbooks, standards, ADRs, and reporting dashboards. If it isn't documented, it didn't happen. * Comfort with a small team carrying real regulatory scope. PCI-DSS, PCI PIN, DORA and GDPR are constraints on the work, not optional context. Nice to have: * Open source contributions or side projects, we would like to see how you write code before the technical interview. * Payments industry experience (card acquiring, issuing, PIN, EMV, terminal fleet operations). * Regulated fintech environment (FCA, ECB, or equivalent supervisory scope). WAYS OF WORKING * Out-of-band, non-blocking. We embed in the pipeline, we do not sit in the critical path. * Skin in the game is shared. Application owners own their app's security posture. We provide the patterns, tooling, and verification. * Automation first. If you're doing something manually more than twice, you automate or you hand it back to the owning team. * Public requests, not DMs. All work in the open. Backlog visible. Decisions logged. * Ways of working matter. Defined split between roadmap, keep-the-lights-on, and unplanned work. We push back on unplanned demand with reasons The Perks * We trust you, so we offer flexible working hours, as long it suits both you and your team; * Health Insurance; * Physical and mental health support through our partnership with MyFitness; * 25 days of Annual leave (+ Bank Holidays); * Possibility to visit other Teya offices to meet colleagues in instances when travel is safe and appropriate; * Friday lunch in the office; * Friendly, comfortable and high-end work equipment and informal office environment; * Hybrid work mode policy. Teya is proud to be an equal opportunity employer. We are committed to creating an inclusive environment where everyone regardless of race, ethnicity, gender identity or expression, sexual orientation, age, disability, religion, or background can thrive and do their best work. We believe that a diverse team leads to better ideas, stronger outcomes, and a more supportive workplace for all. If you require any reasonable adjustments at any stage of the recruitment process whether for interviews, assessments, or other parts of the application—we encourage you to let us know. We are committed to ensuring that every candidate has a fair and accessible experience with us.