SMSTR102 - Software Engineer

SmartStream · Hybrid (TBC) · Permanent, full time · Engineer / Senior Engineer (band TBC) · Reports to Head of FEMS Platform Engineering & Operations · Shared follow-the-sun on-call We run the FEMS platform for financial institutions across every major time zone. You will build and operate the containerised AWS estate behind it, carry the pager for it, and make sure our first Amazon Bedrock capabilities ship with guardrails, logging, cost controls and audit evidence. Responsibilities

• Build, harden and operate container workloads on Amazon ECS (Fargate/EC2) and EKS, including image lifecycle and vulnerability remediation.
• Author and review Terraform modules in a multi-account AWS landing zone, applying least-privilege IAM, KMS and per-client isolation.
• Build CI/CD pipelines with image scanning, SBOMs, signed artefacts, blue/green or canary releases and auditable change records.
• Operate Bedrock as a governed platform: Knowledge Bases (RAG), Guardrails, PII redaction, prompt logging, cost and evaluation telemetry.
• Define SLIs/SLOs, improve alert quality, join on-call, lead incident response and run disaster-recovery rehearsals.
• Maintain control evidence for ISO 27001, SOC 2 and DORA; act as level 3 escalation; keep runbooks current and mentor colleagues. Mandatory requirements
• 4+ years in cloud, platform, DevOps or SRE engineering, including 2+ years running production workloads on AWS.
• Hands-on Docker and production experience of ECS and/or Kubernetes.
• Terraform (or CloudFormation / CDK) as primary provisioning tool, including module design and code review.
• Strong Linux fundamentals; scripting or tooling in Python, Go or Bash.
• Solid cloud networking: VPC, subnets, routing, security groups, DNS, TLS, load balancing.
• IAM and secrets discipline: least privilege applied as a habit.
• End-to-end ownership of a CI/CD pipeline you built or substantially maintained.
• Practical observability and on-call experience, including real incidents.
• Built a retrieval or agent workflow on AWS Bedrock or a comparable managed LLM platform (Azure OpenAI, Vertex AI).
• Clear written English; judgement on what belongs in a runbook versus a client RCA. Equality Statement: Smartstream is an equal opportunities employer. We are committed to promoting equality of opportunity and following practices which are free from unfair and unlawful discrimination.