Cloud Platform Engineering Lead

Job summary

Schroders is seeking an experienced Cloud Platform Engineering Lead with deep AWS expertise to build, operate, and secure an AI-first AWS cloud platform. The role involves delivering platform capabilities, building SRE capabilities, and ensuring compliance in a regulated enterprise environment.

Qualifications

• Strong hands-on experience engineering AWS platforms in enterprise or regulated environments
• Familiarity with agentic AI development patterns and tools; experience with AWS Bedrock/Agent-Core and MCP is desirable
• Experience with policy as code tools (e.g., OPA, Cedar, Sentinel) and testing/validating policies is desirable
• Experience building developer platforms / paved roads / self-service platform products is highly desirable
• Deep knowledge of AWS Landing Zones, including Organizations, Control Tower, AFT, account vending, audit, and compliance
• Strong Infrastructure as Code skills using Terraform (required); familiarity with AWS CDK and CloudFormation is a plus
• Experience with CI/CD and Git-Ops using GitHub Actions/Workflows, including approval gates for infrastructure change
• Strong AWS security experience across preventative/detective controls, monitoring/alerting, policy as code enforcement, and vulnerability management
• Proficient Python development (Boto3/Lambda), building automation and services that compose into larger workflows
• Strong Linux systems knowledge and troubleshooting skills
• Experience with AWS core services: networking (VPC), compute, storage, containers (ECS/EKS), serverless

Responsibilities

• Design and deliver a development platform on AWS, enabling teams and autonomous agents to securely create, test, and deliver applications and infrastructure through standardised paved roads
• Engineer and operate the AWS Landing Zone using AWS Organizations and Control Tower, including automated account vending via Account Factory for Terraform (AFT) and governance guardrails (e.g., SCPs)
• Implement Terraform based Infrastructure as Code that is modular, reviewable, and suitable for AI assisted/agentic authoring
• Build and operate CI/CD pipelines using GitHub Actions/Workflows, embedding quality controls such as linting, static analysis, vulnerability scanning, and automated tests
• Define and implement test strategies for platform services and infrastructure code (e.g., unit testing for automation/services, policy tests, IaC validation, integration testing in ephemeral environments)
• Implement preventative and detective security controls (e.g., AWS Config, Security Hub, policy as code, automated compliance scanning)
• Develop and maintain Model Context Protocol (MCP) servers and reusable agent skills, contributing to an enterprise Agent Skills Marketplace with appropriate guardrails
• Design, build, and support AWS services including VPC networking, compute, storage, containers (ECS/EKS), and serverless (Lambda)
• Develop Python based automation, services, and agent skills using Boto3 and AWS Lambda
• Perform Linux configuration, hardening, and troubleshooting in cloud environments
• Collaborate with security, platform, and application teams to improve reliability, security, and developer experience, treating the platform as a product

Skills

Relocation