DevOps Engineer SFTPGo | London hybrid
Deloitte - Recruitment City of London, England, United Kingdom
Business Consulting and Services · 10,001+ employees
About the role
The DevOps Engineer will build and automate a secure, resilient file-transfer platform using SFTPGo on Red Hat OpenShift. Responsibilities include implementing GitOps workflows, CI/CD pipelines, and managing the migration of services from the legacy Axway platform.
What they look for
Requirements
Candidates must have strong hands-on experience with Kubernetes, Red Hat OpenShift, Terraform, and GitOps methodologies. Proficiency in Linux, CI/CD pipeline design, and managed file transfer platforms is essential for this role.
Full description
Role: DevOps Engineer with SFTPGo experience
Location: London, office based 3-4 days per week, the rest remote
Start: ASAP
Contract Duration: Full time role (Monday to Friday) 6 months initially (inside IR35)
Our client are replacing their existing Axway Managed File Transfer platform with SFTP-Go running on Red Hat OpenShift (OCP). The solution will be delivered as a shared, secure and resilient file-transfer platform for internal and external clients.
The DevOps Engineers will provide hands-on platform engineering and infrastructure-as-code capability. Working as part of the SFTP-Go delivery team, they will build and automate the platform, establish GitOps and CI/CD delivery, implement onboarding pipelines, support operational readiness and assist with the controlled migration of services from Axway.
Key Responsibilities:
Platform Engineering
- Build and deploy SFTP-Go on Red Hat OpenShift across development,
test and production environments.
- Implement a highly available platform using PostgreSQL as the
database backend and S3-compatible object storage.
- Create repeatable infrastructure-as-code components for platform
deployment, configuration and environment promotion.
- Implement resilience, backup, restore and recovery arrangements in
collaboration with Infrastructure and Database teams.
GitOps and Configuration Automation
- Establish GitOps delivery using Argo CD and Git-centred,
pull-request-based workflows.
- Ensure platform infrastructure and configuration are version
controlled, reviewable, auditable and capable of automated reconciliation.
- Build an onboarding repository for account and file-flow
definitions, with CI validation against agreed technical and security guardrails.
- Apply approved SFTP-Go configuration through Terraform, with
secrets and SSH keys managed through HashiCorp Vault or External Secrets Operator.
CI/CD Engineering
- Design and implement CI/CD pipelines for platform image builds,
Helm chart linting and testing, policy validation and promotion between environments.
- Automate quality, security and compliance checks within the
delivery pipeline.
- Develop and maintain reusable Helm charts, Terraform modules,
pipeline templates and engineering standards.
- Promote controlled, peer-reviewed change and minimise undocumented
manual configuration.
Security and Platform Hardening
- Work with Security and Network Engineers to harden the OpenShift
and SFTP-Go platform.
- Implement RBAC, network policies, secrets management, TLS/PKI
controls and secure connectivity patterns.
- Support vulnerability remediation, image assurance, policy-as-code
and the production-readiness approval process.
- Ensure configuration and deployment practices meet our clients
security, audit and operational-control requirements.
Observability and Operational Readiness
- Integrate Prometheus metrics, dashboards, logging and alerting
with approved enterprise tooling.
- Implement and test PostgreSQL backup and restore processes.
- Produce operational runbooks, troubleshooting procedures and
recovery documentation.
- Support service transition, operational acceptance, training and
knowledge transfer to support teams.
Axway Migration and Service Onboarding
- Pre-stage SFTP-Go configuration for migration waves and support
testing, cutover, rollback and hypercare activities.
- Help translate existing Axway routing and workflow configurations
into SFTP-Go Event Manager rules and actions.
- Create reusable documentation, templates and golden paths that
enable application teams to onboard file-transfer flows consistently.
- Work with Integration Engineers and application teams to
troubleshoot migration and onboarding issues.
Essential Skills and Experience
- Strong hands-on Kubernetes and Red Hat OpenShift experience supporting production workloads,
including deployments, services, ingress or routes, RBAC, network policies, persistent storage and storage classes.
- Practical experience authoring and
maintaining non-trivial Helm charts.
- Strong Terraform experience, including
reusable modules, peer review and state management for production environments.
- Hands-on GitOps experience using Argo CD or an equivalent tool, with Git-centred and pull-request-based
workflows.
- Experience
designing and implementing CI/CD pipelines using tools such as GitLab CI, GitHub Actions or Tekton.
- Strong Linux fundamentals and scripting
or automation experience.
- Experience working with containers,
registries, image build processes and deployment promotion.
- Working knowledge of secrets management
and TLS/PKI fundamentals.
- A declarative, automation-first
approach, with a strong preference for documented, repeatable and auditable change.
- Exposure to SFTP-Go, Axway or
another Managed File Transfer platform.
- Ability to work effectively across
Architecture, Infrastructure, Security, Network, Database, Operations, Integration and application teams.
Desirable Skills and Experience
- Working knowledge of SFTP, SSH and
enterprise network concepts, including firewalls, NAT, DMZ connectivity and load balancing.
- Experience operating PostgreSQL and
implementing backup, restore and high-availability arrangements.
- Experience with S3-compatible object
storage.
- Experience with HashiCorp Vault or
External Secrets Operator.
- Experience implementing policy-as-code
using Kyverno or an equivalent technology.
- Experience migrating a legacy platform
into containers using phased or parallel-run cutovers.
- Experience delivering shared platforms
in regulated or financial-services environments.
- Experience implementing
Prometheus-based observability and operational alerting.
#Li-hybrid
Similar roles
-
DevOps Engineer
Interclypse, Inc. Annapolis Junction, Maryland, United States
-
DevOps Engineer II
OpenEye Liberty Lake, Washington, United States · $90K–$125K/yr
-
DevOps Engineer II
Katmai United States · $115K–$125K/yr
-
Director, AWS Infrastructure and DevOps
Inizio Evoke Tempe, Arizona, United States · $135K–$150K/yr
-
Senior AWS DevOps Engineer
Netcompany Leeds, England, United Kingdom
-
DevOps Engineer
BigTime Software Chicago, Illinois, United States · $120K–$128K/yr