DevOps Engineer SFTPGo | London hybrid
Role: DevOps Engineer with SFTPGo experience
Location: London, office based 3-4 days per week, the rest remote
Start: ASAP
Contract Duration: Full time role (Monday to Friday) 6 months initially (inside IR35)
Our client are replacing their existing Axway Managed File Transfer platform with SFTP-Go running on Red Hat OpenShift (OCP). The solution will be delivered as a shared, secure and resilient file-transfer platform for internal and external clients.
The DevOps Engineers will provide hands-on platform engineering and infrastructure-as-code capability. Working as part of the SFTP-Go delivery team, they will build and automate the platform, establish GitOps and CI/CD delivery, implement onboarding pipelines, support operational readiness and assist with the controlled migration of services from Axway.
Key Responsibilities:
Platform Engineering
- Build and deploy SFTP-Go on Red Hat OpenShift across development, test and production environments.
- Implement a highly available platform using PostgreSQL as the database backend and S3-compatible object storage.
- Create repeatable infrastructure-as-code components for platform deployment, configuration and environment promotion.
- Implement resilience, backup, restore and recovery arrangements in collaboration with Infrastructure and Database teams.
GitOps and Configuration Automation
- Establish GitOps delivery using Argo CD and Git-centred, pull-request-based workflows.
- Ensure platform infrastructure and configuration are version controlled, reviewable, auditable and capable of automated reconciliation.
- Build an onboarding repository for account and file-flow definitions, with CI validation against agreed technical and security guardrails.
- Apply approved SFTP-Go configuration through Terraform, with secrets and SSH keys managed through HashiCorp Vault or External Secrets Operator.
CI/CD Engineering
- Design and implement CI/CD pipelines for platform image builds, Helm chart linting and testing, policy validation and promotion between environments.
- Automate quality, security and compliance checks within the delivery pipeline.
- Develop and maintain reusable Helm charts, Terraform modules, pipeline templates and engineering standards.
- Promote controlled, peer-reviewed change and minimise undocumented manual configuration.
Security and Platform Hardening
- Work with Security and Network Engineers to harden the OpenShift and SFTP-Go platform.
- Implement RBAC, network policies, secrets management, TLS/PKI controls and secure connectivity patterns.
- Support vulnerability remediation, image assurance, policy-as-code and the production-readiness approval process.
- Ensure configuration and deployment practices meet our clients security, audit and operational-control requirements.
Observability and Operational Readiness
- Integrate Prometheus metrics, dashboards, logging and alerting with approved enterprise tooling.
- Implement and test PostgreSQL backup and restore processes.
- Produce operational runbooks, troubleshooting procedures and recovery documentation.
- Support service transition, operational acceptance, training and knowledge transfer to support teams.
Axway Migration and Service Onboarding
- Pre-stage SFTP-Go configuration for migration waves and support testing, cutover, rollback and hypercare activities.
- Help translate existing Axway routing and workflow configurations into SFTP-Go Event Manager rules and actions.
- Create reusable documentation, templates and golden paths that enable application teams to onboard file-transfer flows consistently.
- Work with Integration Engineers and application teams to troubleshoot migration and onboarding issues.
Essential Skills and Experience
- Strong hands-on Kubernetes and Red Hat OpenShift experience supporting production workloads, including deployments, services, ingress or routes, RBAC, network policies, persistent storage and storage classes.
- Practical experience authoring and maintaining non-trivial Helm charts.
- Strong Terraform experience, including reusable modules, peer review and state management for production environments.
- Hands-on GitOps experience using Argo CD or an equivalent tool, with Git-centred and pull-request-based workflows.
- Experience designing and implementing CI/CD pipelines using tools such as GitLab CI, GitHub Actions or Tekton.
- Strong Linux fundamentals and scripting or automation experience.
- Experience working with containers, registries, image build processes and deployment promotion.
- Working knowledge of secrets management and TLS/PKI fundamentals.
- A declarative, automation-first approach, with a strong preference for documented, repeatable and auditable change.
- Exposure to SFTP-Go, Axway or another Managed File Transfer platform.
- Ability to work effectively across Architecture, Infrastructure, Security, Network, Database, Operations, Integration and application teams.
Desirable Skills and Experience
- Working knowledge of SFTP, SSH and enterprise network concepts, including firewalls, NAT, DMZ connectivity and load balancing.
- Experience operating PostgreSQL and implementing backup, restore and high-availability arrangements.
- Experience with S3-compatible object storage.
- Experience with HashiCorp Vault or External Secrets Operator.
- Experience implementing policy-as-code using Kyverno or an equivalent technology.
- Experience migrating a legacy platform into containers using phased or parallel-run cutovers.
- Experience delivering shared platforms in regulated or financial-services environments.
- Experience implementing Prometheus-based observability and operational alerting.
#Li-hybrid