Platform Engineer

Who are we?At Finastra, we’re a global leader in financial services software, dedicated to expanding access to financial services and shaping what’s next for the industry. Our technology powers mission‑critical solutions across Lending, Payments and Universal Banking, supporting over 7,000 customers, including 80% of the world’s top 50 banks, in more than 110 countries.# Platform Engineer## About FinastraFinastra is a global leader in financial technology, providing innovative solutions that help financial institutions around the world transform their operations and deliver exceptional customer experiences.About the RoleYou will build and run the platform that engineering teams deploy onto — a multi-tenant, cloud-native SaaS environment supporting the modernisation of a large-scale financial system from on-premises to Kubernetes-based microservices. This is a senior software engineering role first, and a DevOps/platform role second: you write production-grade code for the tooling and automation you own, not just scripts and YAML, and you understand the Spring Boot services running on top of the platform well enough to debug deployment issues at the application layer, not just the infrastructure layer.Core Technical RequirementsSoftware Engineering Foundation7+ years professional software engineering experience — strong general-purpose programming (Java and/or Go or Python), not solely scriptingWrites and reviews production-grade code for internal platform tooling — CLIs, operators, controllers, automation services — with the same rigour as application code: tests, code review, versioningComfortable extending or contributing to shared Spring Boot libraries and starter packs consumed by other engineering teamsUnderstands software design fundamentals — API design, concurrency, error handling, backward compatibility — well enough to be a credible reviewer on both infra and application pull requestsCan debug across the full stack — from a Kubernetes scheduling failure down to a Spring Boot stack trace or a Hibernate query planGitHub & Source Control EngineeringDeep GitHub Actions expertise — authoring reusable/composite workflows, matrix builds, self-hosted runners, caching strategies, and secure secret handling in CIRepository governance at scale — branch protection rules, required status checks, CODEOWNERS, merge queue strategy across many repos or a monorepoGitHub Advanced Security — secret scanning and push protection, code scanning (CodeQL), Dependabot policy and triageGitHub Apps and fine-grained access tokens for internal automation — building bots/integrations against the GitHub API rather than relying on personal access tokensGitHub Environments — deployment protection rules, required reviewers, and environment-scoped secrets as a promotion gate into staging/productionOrganisation and team permission design — least-privilege access across engineering teams, audit logging, SSO/SAML integrationGitOps & DevOpsProduction experience with GitOps tooling — ArgoCD or Flux — managing declarative, Git-driven deployments across multiple environments and clustersInfrastructure as Code — Terraform for cloud provisioning; Helm charts / Kustomize for Kubernetes manifestsProgressive delivery — canary and blue-green rollout mechanics, automated rollback triggers tied to health signalsSecrets management integrated into pipelines — Vault, Sealed Secrets, or cloud-native secret storesKubernetes & Cloud InfrastructureKubernetes at depth — deployments, StatefulSets, ConfigMaps, Secrets, resource quotas, autoscaling (HPA/VPA), network policiesMulti-tenant cluster design — namespace isolation, per-tenant resource boundaries, workload schedulingCloud platform experience (AWS, Azure, or GCP) — networking, IAM, managed Kubernetes (EKS/AKS/GKE), managed databasesContainer image strategy — multi-stage Docker builds, base image hardening, registry and vulnerability scanningObservability & ReliabilityBuilds and maintains observability stack — structured logging, distributed tracing, metrics (Prometheus/Grafana or equivalent)Defines SLIs/SLOs and alerting thresholds in partnership with engineering teamsIncident response — on-call practices, runbooks, postmortems that lead to platform-level fixes, not just fire-fightingNice to HaveExperience migrating workloads from on-premises / JBoss-style deployments into KubernetesKafka or RabbitMQ operations — cluster management, topic/queue scaling, consumer lag monitoringPolicy-as-code experience — OPA/Gatekeeper, admission controllers, compliance-as-code for regulated environmentsExposure to the financial services domain — awareness of the audit, resiliency, and change-control expectations that come with banking customersWhat We Look For at This LevelYou treat the platform as a product — self-service, documented, and reliable enough that application teams rarely need to escalate to youYou write platform tooling as real software — tested, versioned, code-reviewed — not one-off scripts that only you can maintainYou can move fluidly between a Terraform module, a GitHub Actions workflow, a Kubernetes manifest, and a Spring Boot stack trace without losing contextYou design deployment and rollback paths that reduce customer-facing risk by default, not as an afterthoughtYou partner with engineering teams during design, flagging operability, security, and scaling concerns before code is writtenYou mentor other engineers on CI/CD and platform practices, and you're a credible voice in architecture discussions beyond just infrastructureWe are proud to offer a range of incentives to our employees worldwide. These benefits are available to everyone, regardless of grade, and reflect the values we stand for:Flexibility: Enjoy unlimited vacation, subject to local regulations and business priorities. Benefit from hybrid working arrangements and inclusive policies such as paid time off for voting, bereavement, and sick leave.Well‑being: Access confidential one‑to‑one support through our Employee Assistance Program, connect with our network of Wellbeing Champions and Gather Groups, and take part in monthly events and initiatives designed to help you thrive—inside and outside of work.Health & Financial Security: Medical, life and disability insurance, retirement plans, lifestyle, and other benefits.*Sustainability: Paid time off for volunteering and donation‑matching opportunities to support causes that matter to you.Inclusion: Get involved in our inclusion communities, such as Count Me In, View email address on click.appcast.io, View email address on click.appcast.io, View email address on click.appcast.io, and View email address on click.appcast.io—open to everyone who wants to participate and contribute.Career Development: Access online learning and accredited courses through our Skills & Career Navigator tool.Recognition: Take part in our global recognition program, Finastra Celebrates, and share your voice through regular employee surveys that help shape our culture and ways of working.*Specific benefits may vary by location.At Finastra, each individual is unique—bringing their own ideas, perspectives, cultural backgrounds, and experiences. We learn from one another, value what makes us different, and create an environment where everyone feels included, supported, and able to be their authentic selves.Be unique. Be exceptional. Help us make a difference at Finastra. #J-18808-Ljbffr