Senior Platform Engineer

About OneView Commerce

For retailers with thousands of shops, commerce platforms have historically fallen into two categories, each with significant drawbacks. Web-native platforms move fast but were never built for a shop floor. Legacy store systems were built for the shop floor but take a year to change anything. OneView Commerce is the third option: a headless commerce platform for physical retail that lets the world's largest retailers innovate just as quickly as the smaller ones. We ship store experiences that deploy fast out of the box, and we give retailers the freedom to build their own on top of a headless transaction engine engineered for the physical store rather than the browser.

Our customers are global retailers who build on OneView because it lets them keep moving: new journeys, new channels, and new store formats ship continuously rather than waiting on the next multi-year program.

Founded in 2010 to close the gap between fast-moving e-commerce and slow-moving in-store systems, OneView's founding principle is a single view of customers, orders, and inventory throughout the shopping journey. That remains our mission as we enable retailers to deliver exceptional store experiences that build loyalty.

We are a remote-first team with Viewers working across the globe, and we operate as a trusted provider of digital commerce systems for leading retailers.

Position summary

OneView is looking for a Senior Platform Engineer to join our DevSecOps team, which builds and secures the platform that every other OneView team depends on.

Work reaches you through a backlog owned and ranked by the team's technical product owner. Requests from other teams are qualified, ranked, and specified by the team's technical product owner before they are assigned, so planned work arrives ready to start.

You report to the Sr. Director of Platform Engineering, who sets vision, strategy, and the roadmap for Platform Engineering, and owns how the team's work gets done: technical approach, standards, assignment, and quality. This is an individual contributor role with no direct reports.

We use AI throughout our work and want you to find uses for it we have not thought of. We also expect you to be able to do this job well if it were switched off tomorrow, because incident diagnosis and infrastructure design depend on your own judgment.

Responsibilities

• Build and operate the cloud infrastructure our platform runs on, and take each backlog item through to running in production, documented and monitored. Write infrastructure as code and hold it to the same standard as application code: reviewed, tested, and version controlled.
• Build and improve the CI/CD pipelines our delivery teams ship through, and automate the manual steps in the delivery lifecycle.
• Build parts of our internal developer platform (IDP), which Platform Engineering is developing now, as its items reach the backlog.
• Build the monitoring, alerting, and dashboards that catch a problem before a customer reports it. Track consumption and cost against the throughput, concurrency, and headroom each service is sized for, and warn before a threshold is reached.
• Join the on-call rotation, provide first response and root cause analysis for incidents raised through our customer support portal, and handle production support work that arrives through on-call or the backlog. During an incident, share what you know about recent changes, including your own, so the team can find the cause and address it quickly.
• Test backup, archive, and disaster recovery by running restores and failovers against stated recovery point and recovery time objectives.
• Keep our production and development environments secure and in line with our security policies, and work with security engineering on hardening, guardrails, and remediation.
• Provision, refresh, and deploy environments through repeatable automation, including the non-production environments customers use for their own testing and acceptance. Keep them consistent, and keep production data out of non-production environments.
• Build and maintain automated compliance and non-functional validation checks in our pipelines, along with the release gates that hold a change when the required control evidence is missing.
• Produce the evidence that a control was applied and a requirement is met, in a form a customer's technology team or an auditor can review and sign off.
• Work with our test automation team on performance, scalability, resilience, security, and vulnerability testing. Supply the environments, instrumentation, and platform knowledge, and help interpret the results.
• Work with software engineering, QA, delivery, and customer implementation when a backlog item involves their systems, and mentor engineers earlier in their career.
• Bring improvement ideas to the team's technical product owner, and if you think an item is ranked incorrectly, make your case with evidence.

Required skills & experience

• 5+ years in DevOps, cloud engineering, platform engineering, site reliability engineering, or IT operations, running production systems for enterprise customers, with working experience in each of the following areas, using one or more of these or comparable tools:
  • Version control: Git
  • Cloud platforms: AWS, Google Cloud, including compute, networking, identity and access management, storage, and managed services
  • Containers and orchestration: Docker, Kubernetes or a managed equivalent
  • Infrastructure as code: Terraform with Terragrunt, CloudFormation, OpenTofu, Pulumi
  • CI/CD: CircleCI, GitHub Actions, GitLab CI/CD, Jenkins, Bamboo
  • Scripting: Python, Bash
  • Operating systems: Linux, UNIX
  • Monitoring and observability: Datadog, Splunk, Grafana, Prometheus, New Relic
• Has designed and built a backend service with a REST API, in TypeScript, Python, or a comparable language, and run it in production.
• Has written infrastructure as code modules, had them reviewed, and maintained them as requirements changed.
• Has built CI/CD pipelines covering build, test, and deployment, including automated policy or control checks that stop a change that fails a requirement.
• Can debug network problems such as those involving DNS, TLS, load balancing, or routing.
• Can size infrastructure against a throughput and concurrency model with headroom above forecast peak.
• Has been on call for a production system and led the initial response on a live incident through to a completed root cause analysis.
• Has working knowledge of cloud security practice: least privilege, identity and access controls, secrets handling, encryption in transit and at rest, network segmentation, web application firewalls, security logging, audit trails for privileged access, and pipeline guardrails.
• Has produced evidence that a third party accepted, such as an auditor, a regulator, or a customer's technology team.
• Has proven a recovery by running a restore or a failover against stated recovery objectives.
• Has worked alongside a test function on non-functional testing, whether performance, load, resilience, or security, and can build the environment and instrumentation a test needs.
• Can write documentation in Markdown, which we use for our production documentation.

Preferred skills & experience

• A cloud certification from AWS, Google Cloud, or Microsoft at associate level or above.
• GitOps and platform engineering practice: self-service infrastructure, declarative deployment, and internal developer platforms.
• FinOps practice, including reducing cloud costs without degrading performance.
• Security scanning inside a pipeline using tools such as Snyk, Semgrep, SonarQube, Trivy, or Checkov.
• Proficiency in a security discipline such as application security, defensive security, or threat intelligence.
• Has used AI in platform work, such as AI-assisted automation, predictive monitoring, or generating infrastructure code and reviewing it for correctness.
• Performance and resilience testing practice: load and soak testing, chaos engineering, or scheduled failover drills.
• Has integrated a platform with a customer's own monitoring, SIEM, or service management tooling, on an engagement where the customer's technology team formally signed off its non-functional requirements.
• Experience in retail technology or point of sale, or in another domain where software runs in physical locations such as stores or warehouses.

Why OneView

Alongside the global retailers we already serve, we have recently been selected by one of the largest store networks in the world to replace their legacy store system, and are pursuing more retailers that have decided to replace theirs. All of that work runs on the platform this role builds and operates.

Infrastructure changes are approved through peer review within the team, and releases follow a defined change process rather than a standing committee.

Improvements you propose go through the team's technical product owner to the Sr. Director, and approved work is ranked on the same backlog as everything else.

OneView has been named one of Built In's Best Places to Work for three years in a row. Our leadership team brings decades of experience across software development, delivery, sales, and marketing.

OneView Commerce is an equal opportunity employer. All qualified applicants will be considered for employment without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status. If you need adjustments to take part in the recruitment process, tell us and we will make them.

We do not accept CVs from agencies, headhunters, or other suppliers who have not signed a formal agreement with us.

Applicants must have current, ongoing right to work in the UK. OVC is not a licensed visa sponsor and is unable to sponsor a Skilled Worker visa or any other employment visa for this or any role, now or in the future. Evidence of right to work will be required prior to any offer of employment.