London Stock Exchange Group

Summary of Business Unit/Function:

One Policy Engine (OPE) strives to deliver standardized, valuable services to improve the developer experience and cloud enablement solutions. Through daring innovation, focused risk management, and a collaborative culture of continuous improvement, OPE ensures our customers the highest level of service. OPE is an end-to-end solution that eliminates developer frustrations and delays in developing and releasing code to our cloud platforms. It unifies and democratizes the digital policy lifecycle across all clouds, supporting Role-Based Access Control (RBAC), Custom Control Frameworks, and policy writing and application from central controls to specific Line of Business (LoB) controls. In the developer's Integrated Development Environment (IDE) and pipeline stages, OPE guides developers on digital policies to avoid violations, preventing frustrations from hitting rigid guardrails. The OPE Deployment Compliance Gate certifies selected developers running cloud resources for compliance, enabling automated pre-approved releases.

Role Summary:

Position: Platform Principle Engineer

Specialization: In building enterprise solutions with hosted and SaaS-based services for cloud platforms.

As the Principle Engineer, you will provide engineering solutions for unified policy engine platform's development, implementation, and optimisation. Your mission is to create seamless, secure, scalable, and efficient enterprise cloud compliance solutions. You will collaborate with multifunctional teams, embrace DevSecOps practices, leverage Infrastructure as Code (IaC) tools like Terraform, and promote the shift-left approach. Your role spans the entire project lifecycle—from assembling requirements to production deployment—and includes generating and refining developer-focused resources such as cloud architecture patterns, CI/CD pipeline templates, automated testing, and code scanning.

Key Responsibilities and Accountabilities:

• Enterprise Operating Models:
• Develop and implement enterprise-level operating models, SSO, RBAC, and workflows.
• SDLC Integration:
• Build design patterns, modules, and libraries to integrate SDLC processes into the CI/CD pipeline.
• Provide technical expertise in automation engineering, coding, and architecture issues.
• Collaborate with Cloud Engineering/Ops and Dev Tools on DevSecOps automation-related issues.
• Cloud Infrastructure Design and Deployment:
• Collaborate with versatile teams to architect and deploy cloud solutions.
• Choose the appropriate cloud provider (AWS, Azure, GCP) based on project requirements.
• Use IaC tools like Terraform to build and handle cloud resources.
• DevSecOps Integration:
• Embed security considerations early in the development process (Shift Left Approach).
• Automate security checks using tools to scan code, implement coding standards, and lead dependencies securely.
• Integrate security practices throughout the CI/CD pipeline.
• CI/CD Pipeline Management:
• Set up GitLab repositories and configure CI/CD for Terraform deployments.
• Understand GitLab Runners and Artifacts.
• IaC Best Practices (Preferably Terraform):
• Optimize Terraform files and structures.
• Follow Terraform coding conventions.
• Maintain version-controlled Terraform code.
• Open Policy Agent (OPA):
• Implement policies related to infrastructure, security, and compliance using OPA.
• Cloud Service Deployment:
• Lead all aspects of infrastructure monitoring and management.
• Set up monitoring, build alarms, and create dashboards for critical metrics.
• Manage logs efficiently.
• Automation Architecture:
• Conduct investigations and maturity assessments of current DevOps practices.
• Define and apply automation architecture principles.
• Develop automation solutions for Cloud (IaC - Terraform), CI/CD pipelines (YAML), and Quality Engineering (QE) processes.

Technical Skills:

• Policy and Security:
• Proven experience in declarative policy language, context-aware and expressive, architectural flexibility, and coordinated development tools.
• Experience with Azure policies and security guardrails.
• Cloud Technology:
• Knowledge of IaC concepts and cloud technology across CSPs (AWS, Azure, GCP).
• Implementation experience with DevOps, CI/CD, and DevSecOps concepts.
• Architecture and Development:
• Understanding of architecture principles and design methodologies.
• Ability to engage with senior development, infrastructure, and architecture team members.
• Hands-on experience with CI/CD pipelines, code scanning tools, secrets management, Docker, and programming languages (Java/JavaScript, C#, Python).

Crucial Experience:

• Proven experience in leading enterprise/platform engineering teams.
• Proven experience with Open Policy Agent.
• Demonstrated ability in programming (see preferred languages above).
• Demonstrated ability in DevOps automation across various technologies.
• Demonstrated ability to work at an enterprise organization implementing large-scale, advanced technology solutions.
• 5+ years of hands-on experience across cloud services SDLC tools, specifically CI/CD tools (open-source or commercial).
• Validated experience in shift-left approaches.
• Validated experience in working with open-source projects for due diligence, building proof of concepts, and onboarding to enterprise through the portfolio process.

This role requires a blend of technical expertise, leadership, and teamwork skills to drive the success of our One Policy Engine initiative.

LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth.

Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership, Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions.

Working with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce. You will be part of a collaborative and creative culture where we encourage new ideas and are committed to sustainability across our global business. You will experience the critical role we have in helping to re-engineer the financial ecosystem to support and drive sustainable economic growth. Together, we are aiming to achieve this growth by accelerating the just transition to net zero, enabling growth of the green economy and creating inclusive economic opportunity.

LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.

We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone’s race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.

Please take a moment to read this privacy notice carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it’s used for, and how it’s obtained, your rights and how to contact us as a data subject.

If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.