SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Allica Bank, the UK's fastest-growing fintech serving established SMEs, is expanding internationally and seeking a Head of Platform Engineering to design and operate a repeatable, scalable international platform model.
You will own the end-to-end Azure platform architecture and operations across multiple regulated markets. Your core responsibilities include:
**Multi-Market Platform Foundations**: Design and build a parameterized Azure landing zone deployable per market, covering subscription topology, networking, connectivity, policy assignment, and observability. Deliver the entire estate through Infrastructure as Code (Terraform) with peer review, automated compliance checks, and zero manual configuration. Treat the landing zone as a product, not a project, with explicit market-specific variations documented as a narrow set of deltas over a common baseline.
**Identity and Access Management**: Work with central Technology, Identity, and Security teams to design a repeatable Microsoft Entra operating model for international entities. Lead technical onboarding and initial implementation of each entity's Entra environment, including tenant structure, directory topology, privileged-access patterns, joiner-mover-leaver processes, and conditional-access baselines. Ensure local teams have capability, documentation, and runbooks to operate independently while central teams maintain architectural standards. Establish a clear handover and assurance model where local teams operate day-to-day identity administration and central teams own control baselines.
**Regulatory and Control Assurance**: Operate a "central controls, local attestation" model, implementing Allica's centrally-defined control set in each market while maintaining evidence and managing genuine local regulatory deltas. Ensure the platform meets DORA and operational resilience obligations including ICT risk management, incident classification, resilience testing, and third-party arrangements. Produce and maintain scalable attestation templates.
**Platform Operations**: Own service availability, performance, on-call arrangements, incident management, SLOs, capacity planning, and change management. Define a sustainable operating model for small teams across time zones that scales as markets are added without linear headcount growth. Feed operational insights back into landing zone templates.
**Team Leadership**: Recruit, lead, and develop a small, senior engineering team. Set technical standards and remain an active hands-on contributor.
Required experience: substantial hands-on Azure architecture at scale (landing zones, management groups, networking, Azure Policy); deep Infrastructure as Code capability with Terraform, module design, and CI/CD pipelines; demonstrable experience designing and operating Microsoft Entra ID in multi-entity or multi-tenant contexts; delivery within regulated financial services with knowledge of operational resilience and DORA; production platform running experience including incident management and service ownership; track record leading small senior engineering teams while remaining technically hands-on; comfort operating within centrally governed control environments with judgment to distinguish genuine regulatory requirements from preferences.
