Sand Technologies

Compliance

• Assist in monitoring ongoing compliance with ISO 27001, SOC 2, and Cyber Essentials
• Coordinate audit preparation by collecting documentation, organizing evidence repositories, and tracking audit action items
• Maintain a centralized compliance calendar for recurring filings, policy review cycles, and regulatory deadlines
• Update the central Risk Register, track risk owners, and monitor remediation progress
• Log compliance incidents, policy breaches, and near-misses; track corrective actions
• Gather data and draft routine risk and compliance dashboards for management review
• Support drafting, version control, and distribution of internal policies and SOPs
• Assist with compliance training materials, employee completion tracking, and onboarding security training
• Provide administrative support, including meeting coordination, agenda preparation, and action-item tracking
• Serve as a first point of contact for internal compliance documentation and procedure inquiries

Risk & Compliance Administrator

Platform Engineer

• Kubernetes platform ownership: Design, deploy, and operate production Kubernetes clusters across AWS EKS and on-premises / bare-metal environments — owning cluster lifecycle, upgrades, multi-cluster topology, RBAC, networking, ingress, storage, and workload security.
• Platform engineering: Build golden paths and self-service capabilities — Helm charts, operators/CRDs, reusable manifests, and internal tooling — that make it fast and safe for product and delivery teams to ship onto the platform.
• GitOps & automation: Implement declarative, GitOps-driven delivery (Argo CD / Flux) and treat all infrastructure as code so environments are reproducible, auditable, and recoverable.
• Reliability & SRE: Define SLOs and error budgets, lead incident response and blameless post-mortems, drive capacity and autoscaling strategy, and continuously improve the resilience and security posture of critical workloads.
• Observability: Build and own monitoring, logging, tracing, and alerting (Prometheus, Grafana, OpenTelemetry, and similar) so the health of every deployed system is clear and actionable.
• CI/CD pipelines: Develop and maintain CI/CD pipelines that streamline build, test, and deployment across services and environments.
• R&D and problem-solving: Investigate infrastructure-level challenges, prototype solutions, and bring them into production.
• Debugging & issue resolution: Troubleshoot and resolve infrastructure, networking, and cluster issues promptly to protect system integrity and performance.