DevSecOps Engineer

At FrankieOne, we believe verification and onboarding should be fast, frictionless, and flexible. We’re a trusted global identity and fraud detection engine that is passionate about protecting our customers and minimising their exposure to risk with a trusted experience that scales. We get up in the morning to help companies change the way they serve their people by complying with regulations, detecting fraud and verifying their end users. Our culture is what makes Frankie a great place to work. When you join the FrankieOne team, you’re joining an energetic and passionate group of people who love nothing more than solving problems and dreaming big in the process.

The role

We're looking for a DevOps engineer with a security focus to build and enhance our existing team. We're trusted by banks and other security conscious organisations to handle sensitive data, so the security and stability of our operations is paramount.

You're comfortable wrangling unruly Lambda functions, building Terraform scripts, through to designing and implementing new infrastructure to support a major new piece of service functionality. Your security focus will always be cast across the existing service, looking for ways to improve how we keep our customers safe.

You contribute to our development operations and its evolution; plan how these need to change as we grow. You get our systems running promptly to ensure long-term scalability. You bring your previous experience in a similar environment to the table. It is your responsibility to provide ongoing advice and support across all our squads.

Your ticket to success:

• You will provide ongoing monitoring of the organisation's cloud architecture, checking for performance and compliance.
• You will develop the cloud infrastructure and work on IaC to improve efficiency and reduce risk; test and maintain cloud infrastructure in the long term.
• You control and manage the end-to-end deployment processes, working with the dev team to implement and maintain CI/CD practices.
• Manage the platform environments. You build platform environments to support auto-scaling for the business in the future. You also ensure our demo and live customer environments are active with redundancies in place.
• Focus on security. Provide security techniques and expertise to ensure the infrastructure and software services meet specific security requirements/certifications (ISO27001)
• Be a team player.
• You liaise closely with both development and operational teams, conducting analyses, and feeding this data back to relevant teams to support their efforts.
• You're an active participant in our regular scrum rituals (stand-up, grooming, retro, etc).
• You also work closely with senior engineering staff on systems and security architecture
• Your input and new ideas is important to ensure continuous improvement to both the Security & DevOps pipelines and processes, and to the Information Security tools, services, and processes. You identify and resolve issues and problems with systems and software, and put in place measures to ensure these issues do not reoccur.
• Mentor. You coach and mentor junior members of the team, peer reviewing their work and supporting their development by sharing your knowledge and experience.

In a previous life you have:

• Experience working in an agile, DevOps/SecDevOps/SRE environment.
• +5 years building and managing secure, highly available and robust infrastructure in AWS.
• Built knowledge of setting up, securing, managing and monitoring containerised services in ECS and/or Fargate.
• Use of Terraform to automate the build and management of base infrastructure services.
• Made extensive use of AWS technologies such as ELB/ALB, ACM, Route53, SQS, SES, RDS (PostgreSQL), Secrets Manager, DynamoDB, S3, Lambda, Kinesis, CloudWatch, CloudTrail, Elasticache (Redis) and especially IAM.
• Extensive experience with git version control, git branching and merging (we use BitBucket and Github).
• Experience in building and defining build and release pipelines using tools like BitBucket or CodePipeline.
• Developed strong scripting skills with Python and bash (javascript an added bonus).
• Experience using Datadog for system monitoring.
• Experience with deploying Node.JS and Golang services.
• Extensive experience working with Linux environments (we use Debian variants or AWS Linux).
• Ideally, a background in software engineering would be a plus. As mentioned above, we're a Golang and Node/Typescript/Express/Vue shop.
• Preferably experience with vulnerability scanning, penetration testing and risk. assessments as well as relevant professional certifications from industry organisations such as GIAC, ISC2, ISACA desired.

#LI-DNI

Our benefits & ways of working

• Pick your own tech. We want you to be comfortable with your technology. That's why every employee is given an allowance to purchase the technology they want. Team PC or Team Mac, we won't judge!
• Ongoing Development Opportunities. We pride ourselves on our culture of continuous development and learning.
• Hybrid Working: At a minimum we come together on Wednesdays and Fridays so we can maintain our vibrant office culture. Part of the Stone & Chalk startup ecosystem, our offices come with a LOT of perks and community events including weekly breakfast, fortnightly 'Chalk Chills' drinks and 'Sweet Spot'.
• Enhanced Parental Leave. We offer up to 12 weeks paid parental leave for primary carers and 4 weeks for secondary (with the option to swap in if needed).
• Team Building & Social Events. Trivia or board game fan? We have you covered. We run regular team building and social events to maximise collaboration across teams.
• MERCH: On starting, you will receive a coveted Frankie hoody and t-shirt.

Creating a diverse and inclusive culture is fundamental to our success here at FrankieOne. We welcome and value all religions, national origins, gender identity or expressions, sexual orientation, marital status, age profiles, and those with specific needs. We are also aware that women and other marginalised people may only apply if they tick every box. However, even if you don't meet every single point on our job description, as long as you meet any essential criteria, and are motivated and curious to learn then please get in touch. We’d love to have a chat and take it from there!