Interval Group

Backend Engineer

• Design, develop, and maintain robust backend services and scalable systems using Java
• Architect and implement cloud-native solutions leveraging the Google Cloud Platform (GCP) ecosystem
• Develop high-performance microservices and handle asynchronous data processing
• Work extensively with event-driven architectures and messaging systems such as Pub/Sub and RabbitMQ
• Manage and optimise relational databases, specifically focusing on PostgreSQL
• Design, build, and integrate secure and efficient RESTful APIs
• Collaborate closely with cross-functional teams to ensure seamless project delivery

Senior Backend Developer, Java – GCP

Security Engineer

• Provide expert technical support to system administration teams to deploy and maintain EDR and CNAPP agents across on-premises and public cloud environments.
• Manage security coverage across diverse client and server endpoints, including physical hosts, VMs, VDIs, and containers.
• Support multiple operating systems, specifically ensuring seamless protection across Windows, Linux, and MacOS.
• Test, maintain, optimize, and document custom security policies and procedures for EDR and CNAPP tools.
• Define and enforce tailored security policies for containers, hosts, and orchestrators like Kubernetes.
• Liaise closely with internal infrastructure teams and external vendors to ensure maximum uptime and operational maintenance of security tools.
• Integrate endpoint and cloud-native security tools with wider security platforms to enhance overall enterprise resilience and operations.
• Monitor tool performance, optimising configurations to ensure minimal impact on system resources without compromising cybersecurity coverage.

Cybersecurity Engineer – EDR, CNAPP Specialist

DevOps Engineer

• Validate deployment artifacts from an operational perspective, enforce strict quality assurance measures, and ensure robust rollback strategies and observability are in place for production deployments
• Monitor system health, performance metrics, and service availability across multi-tenant environments to ensure stability and responsiveness
• Identify, analyze and resolve incidents swiftly to minimize disruption, triggering root cause analyses and implementing preventive actions
• Reduce operational toil by automating recurring standard processes and validating procedures through a structured software development lifecycle
• Implement comprehensive logging and monitoring strategies to support audit requirements, perform routine security scans, and remediate identified vulnerabilities

DevOps Engineer, mk8s

Operations

• Validate deployment artifacts from an operational standpoint
• Oversee system health, performance metrics, and service availability
• Identify, analyze, and resolve platform incidents
• Mitigate operational toil by automating recurring standard procedures
• Implement robust monitoring and logging strategies to meet compliance audits

Observability & Operations Engineer

• Lead the validation of deployment artifacts from an operational standpoint
• Monitor system health, performance metrics, and service availability
• Direct root cause analyses and implement corrective and preventive actions
• Reduce operational toil by automating recurring remedial processes
• Implement comprehensive logging and monitoring strategies

Senior DevOps Engineer, mk8s

• Managing core ITSM processes (Incident, Major Incident, Problem, Change, Service Request, Knowledge) end-to-end across T2/T3 and product stakeholders
• Triaging and steering work in ITSM queues: validating completeness, routing to resolver groups, ensuring correct categorisation, priority/urgency and customer impact statements
• Orchestrating Major Incident execution: ensuring roles are assigned, communications are running, timelines captured and PIR/RCA actions tracked to completion
• Coordinating change execution: raising requests correctly, documenting risk/impact, obtaining approvals, capturing implementation evidence and recording outcomes
• Managing problem flow: converting recurring incidents into problems, assigning RCA ownership and tracking corrective actions through to completion
• Managing Service Request operations: enforcing SLAs, handling escalations and identifying opportunities for optimisation and automation
• Ensuring knowledge articles are created and updated from incidents, problems and changes, with quality reviewed and articles linked to tickets for reuse
• Monitoring operational SLAs/OLAs, identifying breaches early and coordinating recovery actions
• Running planned operational cadences (daily ticket health checks, change coordination touchpoints, backlog reviews)
• Identifying, defining and managing continuous service improvements

T3 Process Manager – Local Platform Operations

Customer Support

• Providing T3 operational ownership for Compute & OS services: handling complex incidents, troubleshooting and RCA, and driving permanent fixes and preventive measures
• Ensuring compute/OS readiness for releases and changes: monitoring/alerting coverage, performance baselines, hardening, patch strategy, rollback and recovery procedures, and runbooks
• Executing and improving standard operational procedures through automation to reduce toil and improve MTTR and stability
• Coordinating with Kubernetes, Data, Network and Storage SMEs to resolve cross-domain production issues
• Validating deployment artefacts from an operations perspective and enforcing quality assurance measures
• Monitoring system health, performance metrics and service availability across multi-tenant environments
• Identifying, analysing and resolving incidents to minimise service disruption, and triggering RCA and corrective actions
• Implementing monitoring and logging strategies to support audit and compliance requirements
• Performing routine security scans and remediating identified vulnerabilities

T3 Operations & Support Specialist – Compute & OS

• Providing T3 operational ownership for Network & Security services: resolving complex incidents, driving RCA and remediation across the full network/security stack
• Ensuring operational readiness for network/security changes: monitoring/alerting, validation steps, rollback strategies, runbooks and maintenance procedures
• Supporting compliance-relevant operational controls (logging/monitoring evidence, access enforcement patterns, vulnerability handling coordination)
• Coordinating with platform and Kubernetes teams to resolve cluster and application impacts caused by network/security constraints
• Executing and improving standard operational procedures through automation to reduce toil and improve MTTR and stability
• Monitoring system health, performance metrics and service availability across multi-tenant environments
• Identifying, analysing and resolving incidents to minimise service disruption, and triggering RCA and corrective actions
• Implementing monitoring and logging strategies to support audit and compliance requirements
• Performing routine security scans and remediating identified vulnerabilities

T3 Operations & Support Specialist – Network & Security

• Providing T3 operational ownership for Storage services: handling complex incidents, deep troubleshooting and RCA, and driving permanent fixes and preventive measures
• Ensuring operational readiness for storage changes: monitoring/alerting coverage, performance baselines, hardening, patch strategy, rollback and recovery procedures, and runbooks
• Executing and improving standard operational procedures through automation (capacity checks, validation procedures, provisioning workflows)
• Validating deployment artefacts from an operations perspective and enforcing quality assurance measures
• Monitoring system health, performance metrics and service availability across multi-tenant environments
• Identifying, analysing and resolving incidents to minimise service disruption, and triggering RCA and corrective actions
• Implementing monitoring and logging strategies to support audit and compliance requirements
• Performing routine security scans and remediating identified vulnerabilities

T3 Operations & Support Specialist – Storage

Engineer

• We are seeking a Mid-level IAM, Secrets and PKI Engineer to join the Identity and Access Management team of a large internal platform programme in the energy sector.
• You will design, implement and operate Keycloak and HashiCorp Vault across a hybrid cloud environment, delivering scalable, secure and federated access management alongside a robust PKI and secrets management capability.
• Implementing RBAC/ABAC policies and multi-realm setups in Keycloak, mapping Kerberos/IPA identities and groups into realms, roles and clients
• Configuring SSO flows, MFA and identity federation across hybrid cloud and on-premises workloads
• Deploying Keycloak on VMs, Docker and Kubernetes (OpenShift and bare-metal), configuring OIDC, OAuth2, SAML and Kerberos/LDAP federation
• Deploying Keycloak on GKE with Helm/Operators, integrating with Google Identity and mapping Keycloak roles to GCP IAM roles
• Configuring HashiCorp Vault to secure Keycloak operational secrets, implementing dynamic secrets for DB backends and integrating Vault Agent/Sidecar injector for secret injection into Keycloak pods
• Deploying and operating Vault in production on Linux-based systems, including HA, Raft storage, seal/unseal mechanisms and HSM/KMS integration
• Managing Vault PKI operations including intermediates, issuing CAs, short-lived certificate issuance, CRL/OCSP integration and automated revocation
• Implementing ACME v2, EST for devices, AIA/CRL/OCSP publishing and RFC 5280 profiles
• Automating Keycloak and Vault deployment and configuration using Terraform, Helm and Ansible
• Integrating certificate and secret distribution into CI/CD pipelines (Jenkins, GitHub Actions, GitLab CI)
• Monitoring both platforms with Prometheus and Grafana and managing incident response for expired certificates, Vault unseal failures and IPA migration issues

IAM KeyCloak Secrets PKI Engineer

• Designing and implementing DevSecOps architectures ensuring integrity, confidentiality and availability across systems, pipelines and repositories
• Developing and configuring CI/CD pipelines with built-in security scanning, compliance checks and automated validation
• Implementing secure configuration, access controls and encryption for systems, repositories and deployment pipelines
• Conducting risk assessments and threat modelling to proactively identify and mitigate weaknesses in DevOps workflows
• Automating infrastructure provisioning using Terraform, Ansible or OpenTofu following security and reliability best practices
• Designing and implementing self-service interfaces enabling developers to access security tools directly
• Integrating security tools into CI/CD pipelines as part of standard development workflows
• Automating SBOM and KBOM generation using tools such as Trivy, Syft and Dependency-Track, integrating outputs into CI/CD pipelines
• Continuously monitoring systems and containers for vulnerabilities, prioritising findings and coordinating remediation
• Conducting security hardening activities including least privilege enforcement, secure configuration baselines and penetration testing
• Performing regular audits of configurations, user access and system logs
• Creating and maintaining comprehensive documentation on architecture, configurations, processes and incident response plans

CI/CD Engineering – Security & Compliance

• Advise on and deliver security infrastructure in line with architectural and operational requirements
• Focus on datacenter security, firewall management, DNS hardening and security delivery automation
• Develop detailed security deployment plans covering implementation phases, resources and timelines
• Install and configure security solutions in line with defined security standards and best practices
• Maintain thorough documentation of the security environment including configurations, protocols and decision justifications
• Continuously validate implementation processes for effectiveness and alignment with organisational goals
• Identify discrepancies or inefficiencies in processes and propose corrective actions