Platform Principal Engineer

Summary of Business Unit/Function:

One Policy Engine (OPE) strives to provide standardized, valuable services to improve the developer experience and cloud enablement solutions. Through innovative ways, focused risk management, and a culture of continuous improvement, OPE delivers credible services to our customers. It offers an end-to-end solution to eliminate developer frustrations and delays when releasing code to our cloud platforms. OPE unifies and democratizes the digital policy lifecycle across all clouds, supporting Role-Based Access Control (RBAC), Custom Control Frameworks, and policy writing and application from central to specific Line of Business (LoB) controls. It integrates directly within the developer's Coordinated Development Environment (IDE) and pipeline stages to guide developers on digital policies and avoid violations. The OPE Deployment Compliance Gate certifies selected developers for compliance, enabling automated pre-approved releases.

Role Summary:

Position: Platform Principal Engineer

Specialization: In building enterprise solutions with hosted and SaaS-based services for cloud platforms.

As a Platform Principal Engineer, you will be at the forefront of crafting, implementing, and optimizing the unified policy engine platform. Your mission is to build seamless, secure, scalable, and efficient enterprise cloud compliance solutions. You will collaborate with multifunctional teams, embrace DevSecOps practices, leverage Infrastructure as Code (IaC) tools like Terraform, and nurture the shift-left approach. Your involvement spans the entire project lifecycle—from gathering requirements to production deployment—and includes generating and refining developer-focused resources such as cloud architecture patterns, CI/CD pipeline templates, automated testing, and code scanning.

Key Responsibilities and Accountabilities:

• Enterprise Operating Models:
  • Develop and implement enterprise-level policy operating models, Single Sign-On (SSO), RBAC, and workflows.
• Control workflows
  • Design Policy Ops model, Create/Implement security/risk control frameworks, develop build/run time policies using rego for Azure/AWS/GCP resources, good understanding on Azure/AWS/GCP policy frameworks/security.
• SDLC Integration:
  • Build design patterns, modules, and libraries to integrate SDLC processes into the CI/CD pipeline.
  • Provide technical expertise in automation engineering, coding, and architecture issues.
  • Collaborate with Cloud Engineering/Ops and Dev Tools on DevSecOps automation-related issues.
• Cloud Infrastructure Design and Deployment:
  • Architect and deploy cloud solutions with multifunctional teams.
  • Select the appropriate cloud provider (AWS, Azure, GCP) based on project requirements.
  • Apply IaC tools like Terraform to build and manage cloud resources.
• DevSecOps Integration:
  • Implement security practices early in the development process (Shift Left Approach).
  • Automate security checks, scan code, implement coding standards, and manage dependencies securely.
  • Integrate security throughout the CI/CD pipeline.
• CI/CD Pipeline Management:
  • Set up GitLab repositories and configure CI/CD for Terraform deployments.
  • Understand GitLab Runners and Artifacts.
• IaC Best Practices (Preferably Terraform):
  • Optimize Terraform files and structures.
  • Follow Terraform coding conventions.
  • Maintain version-controlled Terraform code.
• Open Policy Agent (OPA):
  • Implement policies related to infrastructure, security, and compliance using OPA.
• Cloud Service Deployment:
  • Oversee infrastructure monitoring and management.
  • Set up monitoring, build alarms, and create dashboards for critical metrics.
  • Manage logs efficiently.
• Automation Architecture:
  • Conduct investigations and maturity assessments of current DevOps practices.
  • Define and apply automation architecture principles.
  • Develop automation solutions for Cloud (IaC - Terraform), CI/CD pipelines (YAML), and Quality Engineering (QE) processes.

Essential Technical Skills:

• Policy and Security:
  • Proficiency in declarative policy language, context-aware and expressive, architectural flexibility, and integrated development tools.
  • Experience with Azure policies and security guardrails.
• Cloud Technology:
  • Knowledge of IaC concepts and cloud technology across CSPs (AWS, Azure, GCP).
  • Implementation experience with DevOps, CI/CD, and DevSecOps concepts.
• Architecture and Development:
  • Understanding of architecture principles and design methodologies.
  • Ability to engage with senior members of development, infrastructure, and architecture teams.
  • Hands-on experience with CI/CD pipelines, code scanning tools, secrets management, Docker, and programming languages (Java/JavaScript, C#, Python).

Essential Experience:

• 4+ years of leading enterprise/platform engineering teams.
• 3+ years with Open Policy Agent.
• 6+ years in programming.
• 6+ years in DevOps automation across various technologies.
• 6+ years implementing large-scale, end-to-end technology solutions in an enterprise setting.
• Proven experience in shift-left approaches and working with open-source projects for proof of concepts and enterprise onboarding.

This role demands a blend of technical expertise, leadership, and collaboration skills to drive the success of our One Policy Engine initiative.

Compensation/Benefits Information:

LSEG is committed to offering competitive Compensation and Benefits. The anticipated base salary for this position is $95,100 - $158,700.

Please be aware base salary ranges may vary by geographic location, city and state. In addition to our offered base salary, this role is eligible for our Annual Incentive Plan (AIP/”bonus plan”). Target AIP rates will be commensurate with role level and posted career stage. Individual salary will be reflective of job related knowledge, skills and equivalent experience. LSEG roles (excluding internships and part-time roles of less than 20 hours per week) are typically eligible for inclusion in our LSEG Benefits program, which includes offerings of: Annual Wellness Allowance, Paid time-off, Medical, Dental, Vision, Flex Spending & Health Savings Options, Prescription Drug plan, 401(K) Savings Plan and Company match. LSEG’s Benefits plan also includes basic life insurance, disability benefits, emergency backup dependent care, adoption assistance commuter assistance etc.

LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth.

Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership, Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions.

Working with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce. You will be part of a collaborative and creative culture where we encourage new ideas and are committed to sustainability across our global business. You will experience the critical role we have in helping to re-engineer the financial ecosystem to support and drive sustainable economic growth. Together, we are aiming to achieve this growth by accelerating the just transition to net zero, enabling growth of the green economy and creating inclusive economic opportunity.

LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.

We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone’s race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.

Please take a moment to read this privacy notice carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it’s used for, and how it’s obtained, your rights and how to contact us as a data subject.

If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.