Requirements

• Hands-on experience building and operating production services with Python
• Using Kubernetes, Linux, and containerised environments, including networking fundamentals and performance troubleshooting
• Solid understanding of authentication, authorisation, and secrets management (OIDC/OAuth, Azure AD/Entra ID, vault technologies)
• Experience with infrastructure-as-code (e.g., Terraform, Ansible, Helm) and GitOps-based deployment
• Working knowledge of observability stacks (e.g., ELK, Prometheus, Grafana), including building dashboards and alerting rules
• Clear communication and a structured approach to reasoning about risk

Nice to Haves

• Kubernetes knowledge beyond basic usage: network policies, pod security standards, admission controllers, and resource quota enforcement
• Policy engines and workload identity (e.g., OPA/Rego, Kyverno, Cedar, OpenFGA, SPIFFE/SPIRE, Envoy/service mesh)
• API design (REST/gRPC) for internal platform consumers
• Network security controls: WAFs, segmentation, TLS termination, and egress filtering

What You'll Be Doing

• Design, build, and operate security platform services and APIs such as policy decision, just-in-time access, and short-lived credential issuance
• Write and maintain policy-as-code that is tested, version-controlled, and deployed through GitOps
• Integrate the platform with identity providers (Entra/AD), secrets management (Vault), and existing internal infrastructure (Keycloak, Sailpoint)
• Run services to production standards for reliability, performance, and observability, including 2nd line on-call support
• Provide Python APIs and onboard application teams and AI-agent developers to the platform, with documentation that make the secure path the easy one
• Build logging, metrics, and alerting for platform services, and contribute SIEM detection rules

Perks and Benefits

• Opportunities for charitable and global initiatives
• Professional development and flexible working arrangements
• Two annual 'Mankind' days of paid leave for community volunteering
• Comprehensive benefits package including competitive holiday entitlements, pension/401k, life and long-term disability coverage, group sick pay, enhanced parental leave, and long-service leave
• Additional benefits depending on location such as private medical coverage, discounted gym membership options, and pet insurance