*Lead and mentor* a small team of platform engineers; set priorities, review designs and PRs, hire and onboard. *Take the platform live:* own production readiness, DR testing, pen-test and vulnerability remediation. *Run the platform:* AWS, EKS, Terraform, GitOps, policy enforcement, messaging and observability, with runbooks and incident ownership. *Own vendor connectivity and security:* private and mTLS integrations, certificate life cycle and identity, working with vendor technical teams. *Own architecture decisions:* write and defend ADRs at architecture review boards. *Set CI/CD and promotion standards:* audited pipelines and release gates, agreed with central engineering. *Plan and report:* Jira backlog, status reporting, cost estimates; raise risks early. *Support delivery partners* onboarding new services onto the platform. *Essential* Hands-on AWS, Kubernetes/GitOps and Terraform at scale, with team or technical-lead experience. Solid grounding in PKI, mTLS, OAuth2/OIDC, and network and edge security. Experience running production platforms, including DR and incident management. Experience writing architecture decisions and presenting them to governance boards. CI/CD expertise and a pragmatic approach to controls in a regulated setting. Clear communicator across security, architecture and vendor stakeholders. Familiarity with AI-assisted engineering. *Desirable* Financial services or payments experience. Message-broker and observability tooling experience. ..... full job details .....