Cloud Engineering Specialist

About the role

Payments are fundamental to BT Group's commercial success, processing billions of pounds in transaction value annually across BT, EE, Plusnet and Openreach. As BT Group's strategic payments platform, BT Pay underpins secure, resilient and scalable payment capabilities across the organisation.
As a Cloud Engineering Specialist, you will play a key role in designing, building and operating BT Pay's AWS cloud platform. Working within a modern DevOps environment, you will deliver secure, automated, Infrastructure-as-Code (IaC) solutions that enable engineering teams to build and deploy payment services safely and efficiently.
You'll work closely with software engineers, architects, security specialists and product teams to continually improve our cloud platform, deployment pipelines, operational resilience and developer experience, ensuring our platform remains secure, highly available and fully aligned with PCI-DSS standards.

What you’ll be doing

1.    Design, build and maintain secure, highly available AWS infrastructure supporting BT Pay's production and non-production environments. 
2.    Develop and maintain Infrastructure as Code using Terraform, ensuring infrastructure is repeatable, scalable and fully version controlled. 
3.    Build, optimise and support CI/CD pipelines that automate infrastructure provisioning, application deployment and operational processes. 
4.    Champion cloud engineering best practices across security, resilience, automation and operational excellence. 
5.    Ensure all platform changes meet PCI-DSS, security and operational governance requirements. 
6.    Collaborate with engineering teams to improve developer experience through reusable infrastructure modules, automation and self-service capabilities. 
7.    Monitor platform health, availability and performance, implementing observability, alerting and proactive operational improvements. 
8.    Investigate and resolve complex cloud infrastructure issues, supporting production incidents and root cause analysis where required. 
9.    Work closely with Security, Architecture and Platform teams to continuously improve the cloud security posture, identity management and infrastructure resilience. 
10.    Drive continuous improvement by identifying opportunities to automate manual activities, simplify operations and improve deployment reliability. 
11.    Support disaster recovery, resilience testing and platform capacity planning across AWS environments. 
12.    Mentor engineers within the wider team, sharing cloud engineering expertise and promoting DevOps and Infrastructure as Code best practice. 

Essential Skills / Experience

•    Strong hands-on experience designing and operating production workloads within AWS. 
•    Extensive experience using Terraform for Infrastructure as Code. 
•    Strong knowledge of AWS services including IAM, VPC, EC2, ECS/EKS, Lambda, CloudWatch, Route53, S3, Secrets Manager, KMS and RDS/Aurora. 
•    Experience building and maintaining CI/CD pipelines using GitHub Actions, Jenkins, GitLab or Azure DevOps. 
•    Strong understanding of containerisation technologies including Docker (Kubernetes/EKS desirable). 
•    Experience implementing monitoring, logging and observability solutions. 
•    Knowledge of cloud networking, security and identity management. 
•    Experience supporting highly available, business-critical production services. 
•    Strong scripting capability using Python and/or Bash. 
•    Experience working within Agile engineering teams. 
•    Excellent troubleshooting and problem-solving skills. 
•    Strong communication and stakeholder management skills. 

Desirable Skills / Experience

•    Experience working within PCI-DSS, financial services or other regulated environments. 
•    AWS Professional Certification. 
•    Terraform Associate Certification. 
•    Experience supporting payment platforms or financial transaction systems. 
•    Knowledge of Site Reliability Engineering (SRE) principles. 
•    Experience implementing AWS Well-Architected Framework recommendations. 
•    Experience with GitOps deployment practices. 
•    Familiarity with vulnerability management, cloud security tooling and compliance automation.