Integration Engineer (Third Party Systems), London

Your impact 

We are seeking a talented Integration Engineer to own, secure, and scale our suite of internal, multi-user tools and applications. 

You will be responsible for a number of vendor applications that we deploy in our own environments. You will bridge the gap between Integration, Operations, and Security. You will be responsible for the full software lifecycle; from configuring secure cloud environments, orchestrating application deployments, running automated security scanning, and executing continuous updates with minimal downtime.

What you will do 

• Platform Deployment & Lifecycle Management:
• Deploy, upgrade, patch, and maintain multi-user self-hosted software instances across cloud environments.
• Plan and execute seamless, low-downtime application maintenance and database migration windows.
• Integrate with customer identity platforms to provide secure access.
• Configure monitoring and alerting, with runbooks for application health management
• Continuous Deployment & Orchestration:
• Build and maintain continuous deployment pipelines to automate application delivery (primarily for Kubernetes).
• Maintain Infrastructure-as-Code (IaC) templates and configuration management scripts for reliable instance provisioning.
• Application Security & Vulnerability Scanning:
• Integrate continuous security scanning into pipelines to inspect application code, dependencies, and container images for vulnerabilities.
• Remediate identified CVEs and enforce compliance and security standards across all internal platform tooling.
• Identity & Access Integration: Configure Single Sign-On (SSO), Role-Based Access Control (RBAC), and directory integration (SAML 2.0 / OIDC) for onboarded applications.
• Endpoint & Cloud Deployment: Automate and manage software rollouts across desktop fleets, headless Linux machines, and cloud environments using modern deployment pipelines and configuration tools.
• Configuration & Hardening: Enforce security baseline configurations, secrets management, and access controls for all newly introduced software packages.

Skills and qualifications 

Essential:

• Hands-on Kubernetes & Containerization: Experience deploying, managing, and scaling multi-user applications on Kubernetes 
• CI/CD & Automation: Proven track record building continuous deployment pipelines using tools such as GitHub Actions, GitLab CI, ArgoCD, or Jenkins.
• Security Scanning & Vulnerability Management: Experience implementing and analyzing container and dependency security scanning tools
• Infrastructure as Code (IaC): Proficiency with Terraform, OpenTofu, or similar for provisioning repeatable environments.
• Identity & Access Management (SSO): Practical experience configuring Single Sign-On (SSO) and Directory integration via SAML 2.0 / OIDC (e.g., Okta, Azure AD/Entra ID).
• Scripting Skills: Proficiency in Python, Bash, or Go to automate maintenance routines and internal workflow.

Nice to have:

• GitOps Methodology: Hands-on experience with GitOps tools like ArgoCD or Flux for declarative state enforcement.
• Database & Storage Administration: Experience backing up, restoring, and tuning databases commonly used by self-hosted applications (PostgreSQL, MySQL, Redis).
• Observability Stacks: Experience using monitoring, alerting, and logging tools