Principal Platform Security Engineer (Azure/GCP)

Location: York, United Kingdom

Company

hirify.global is an insurance company operating across London Market technology and change initiatives.

What you will do

• Set direction for platform security practices and lead secure-by-design adoption across Innovation squads and Engineering Chapters.
• Design, implement, and automate security controls and security testing throughout the SDLC.
• Lead application security practices, threat response, vulnerability management, and security incident investigations.
• Build and maintain secure Azure and GCP infrastructure across cloud and on-premises environments using Terraform and Azure DevOps Pipelines.
• Influence architecture decisions and help take platform solutions from proof of concept to production.
• Build monitoring and alerting for infrastructure, applications, and data while coaching teams on secure deployment practices.

Requirements

• 5+ years of DevOps or Platform Engineering experience delivering solutions in Azure and/or GCP.
• Experience designing full-stack application and infrastructure solutions with security controls, high availability, and operational resilience.
• Knowledge of vulnerability, compliance, patch, endpoint protection, anti-malware, and access control management.
• Experience with threat modelling, risk assessment, AppSec tooling, CI/CD integration, and remediation prioritisation.
• Experience with Terraform, cloud-native microservices, containerised systems, and integrations between GCP and Azure.
• Strong leadership, communication, stakeholder-management, Agile, and continuous-improvement skills.

Nice to have

• Insurance, London Market, or Lloyd’s market experience.
• Hands-on software delivery, platform engineering, or build, release, and deployment engineering experience.
• Experience operating technology in regulated environments with audit and evidence-based compliance requirements.
• Awareness of major cloud providers and emerging security, reliability, and cost-efficiency capabilities.

Culture & Benefits

• Permanent, full-time position.
• Opportunity to influence platform security during a period of focused growth.
• Inclusive culture committed to diversity and hiring the best people for the job.
• Opportunity to work with cross-functional engineering, security, and technology teams.