About us
Risk Ledger is developing a network of connected organisations, all working together to defend against cybersecurity attacks in the supply chain.
Organisations rely on us to establish trust, through sharing their security maturity and visualising the risks posed by their supply chain ecosystem. And we’re already trusted by customers like British Airways, BAE Systems and the NHS.
We are putting together an amazing and talented team from a diverse set of backgrounds and skillsets to drive us towards our vision. Risk Ledger is built on the respect we have for one another and our users, united by our shared values and mission.
Every one of us is still learning: it’s how we grow as individuals. We’re curious. We’re ambitious. And we’re humble and honest. At Risk Ledger, we aim high to find the best solutions we can and always put our users first.
The team:
You'll join a cross-functional department of Software Engineers, Product Managers and Designers, all collaborating with the wider business to achieve impactful product outcomes. You'll be part of a small, growing Platform team, working closely with the wider engineering function.
We care deeply about building the right thing, in order to fundamentally shift mindsets in the cybersecurity industry. We ship quickly and continuously in order to learn and iterate, whilst always pushing for a high quality bar and keeping security and automation front and centre - the latter two being critical components of this role.
The core of our stack is Golang, Typescript (VueJS), PostgreSQL , AWS, Google Cloud and Grafana Cloud, with modern design philosophies and a cloud-native approach.
This role:
This role combines aspects of Platform Engineering, Site Reliability Engineering, Developer Experience, and DevSecOps. Working alongside the wider team, you'll build and maintain the foundational systems, tools, and practices that enable our engineering teams to deliver secure, scalable, and reliable software efficiently at pace. You'll be hands-on across the stack, contributing to the standards and consistency we hold across the engineering organisation, and you should expect to manage multiple priorities and operate at varying levels of detail.
You'll join a team that treats our platform as a product, putting the developer experience at the heart of everything you do. Your mission is to build a seamless, secure and reliable path from code to production, enabling our engineering teams to ship value quickly and safely. Day-to-day, you’ll collaborate with engineers, product managers, technical leadership and the wider business on strategic initiatives that deliver real value to our customers.
In the role you will;
- Build and maintain scalable, resilient cloud infrastructure. Working across our products and supporting services, you'll develop and maintain our cloud services and infrastructure in AWS (primary) and GCP. You'll build and operate environments using Terraform and patterns like container orchestration on ECS/EKS , while helping to improve observability, reliability and performance.
- Accelerate product delivery through platform engineering. Contribute to the build of pipelines, tooling and internal platforms that enable fast, safe, automated that seeks to reduce friction across the delivery lifecycle.
- Improve developer experience with self-service tooling and standardisation. Help build the frameworks, tools, self-service platforms and golden paths that streamline workflows, eliminate toil, and promote consistent best practices, so software engineers can focus on high-value customer delivery.
- Support reliability and sacabibility through SRE principles and proactive operations. In partnership with product and engineering teams, you'll participate in incident response, help define and monitor SLI/SLO/SLAs, and work to optimise systems for availability, resilience, performance, and cost.
- Embed security across the engineering lifecycle. Help integrate shift-left security practices into CI/CD pipelines and product workflows so vulnerabilities are caught early and consistently. Support the management of secrets, credentials, and identity access controls, and help enforce compliance through automated policies.
- Contribute to a strong security posture. Working with our Information Security team, you'll help monitor, triage and respond to security events, and support a strong security posture through continuous vulnerability scanning, dependency management and threat modelling.
- Move fast, with an eye for quality. You enjoy moving fast while maintaining a high quality bar through testing, automation, discipline, consistency and best practice, whilst treading a careful line in pragmatism and cost-benefit analysis.
- Share knowledge and grow. You'll share what you know with colleagues, support more junior engineers, and actively grow your own technical and architectural skills with the team around you.
- Support our AI/ML platform tooling. From time to time you'll help maintain the infrastructure and supporting tooling behind our AI and ML capabilities (e.g. Vertex AI on GCP, AWS Bedrock, and LLM observability tooling such as Langfuse). This is a supporting part of the role rather than its focus.
You'll have;
- Experience working in engineering teams building a customer-focused SaaS product, weighing delivering value to clients against technical excellence.
- 4+ years of experience in Platform Engineering, SRE, or DevOps roles.
- Good working knowledge of cloud platforms (AWS and/or GCP), managed services and infrastructure automation tools (Terraform or similar).
- Proficiency in containerisation and orchestration (Containers, ECS, Kubernetes a plus).
- Proficiency in one or more programming or scripting languages (such as Go, TypeScript/JavaScript, Python or Bash), with a background in software engineering being a major plus.
- Experience building or maintaining CI/CD systems (GitHub Actions preferable, ArgoCD etc).
- Experience with monitoring, alerting and logging stacks (the Grafana stack: Prometheus, Loki, Tempo; plus OpenTelemetry).
- A working understanding of networking and distributed systems.
- A working understanding of security and an interest in DevSecOps.
- An ability to work through ambiguity, and comfort tackling problems that aren't always well defined.
- A keen sense of curiosity, with a natural drive to learn and grow.
- A passion to work collaboratively with others. We like to work as a team, not a collection of individuals, and we expect you to have the same mindset.
You might have;
- Knowledge of policy-as-code.
- Familiarity with supply chain security.
- Exposure to cost optimisation and FinOps practices.
- Experience with internal developer platforms or portal tooling (e.g. Backstage, Get Port).
- Exposure to LLM observability or evaluation tooling (e.g. Langfuse).
