Staff Platform Engineer

Job description

### **A****BOUT TIDE** At Tide, we help SMEs save time and money in the running of their businesses by not only offering business accounts and related banking services, but also a comprehensive set of highly usable and connected administrative solutions, from invoicing to accounting. Tide is transforming the small business banking market and now supports over 2 million members globally across the UK, India, Germany and France. Using advanced technology, all solutions are designed with SMEs in mind. With quick onboarding, low fees and innovative features, we thrive on making data driven decisions to serve our mission: to help SMEs save time and money so they can get back to doing what they love. **Tide facts:** - Tide is available for UK, Indian, German and French SMEs - Over 2 million members globally and rapidly growing - Over $300 million raised in funding - 3,000 Tideans globally - Recognised with Great Place to Work certification three years in a row, and among India’s Top 50 Best Workplaces in Banking, Financial Services, and Insurance in 2026 - We have offices in Central London, with a member support and technology centre in Sofia, Bulgaria, technology centres in Serbia, Romania, Lithuania and Hyderabad and offices in Gurugram, New Delhi, Berlin, Paris and Luxembourg ### ABOUT THE TEAM: The IT team at Tide is a small, high-impact group of around 20 people, combining a responsive service desk with strong project-based engineering capability. The team operates in a cloud-native environment, with Google Workspace at the core, and supports a large, globally distributed workforce. The focus is on enabling the business through reliable, secure access to a wide range of SaaS platforms, while continuously improving how services are delivered as the organisation scales. ### ABOUT THE ROLE: You'll be the technical SME for our core IT platforms. As a senior individual contributor, you’ll own the architecture, configuration and health of the platforms every Tidean relies on. You’ll make the key design decisions, keep the platforms secure, well governed and documented, and drive improvements from design through to rollout. The major platforms in scope are: - - Google Workspace: identity and access policies, DLP, email security and ChromeOS management - Netskope (SSE/SASE): SWG, CASB, DLP and ZTNA - Jamf Pro and Microsoft Intune: zero-touch provisioning, compliance, patching and encryption for the Mac and Windows fleet - Atlassian: Jira Service Management as our ITSM platform and CMDB, plus Jira and Confluence - Establish configuration as code mentality within the team: manage platform config through Terraform, Git and CI/CD where the tools allow it, and script everything else. - Own the engineering side of endpoint security and compliance controls, including EDR integrations, OS and application patching, vulnerability remediation, encryption, device compliance and security baselines. - Build monitoring, reporting and operational health metrics for workplace platforms, using APIs and automation to identify configuration drift, failures, capacity issues and emerging operational risks before they become incidents. - Own technical design and architecture decisions for Workplace Technology, including platform standards, technical debt, vendor evaluation, proof of concepts, migration strategy and lifecycle planning. - Act as L3 escalation for complex incidents, carry out root-cause analysis, and turn what we learn into lasting fixes. - Support audit and compliance work (e.g. ISO 27001, SOC 2, FCA and DORA requirements) with evidence, controls and documentation. - Mentor engineers and service desk colleagues, raise the team's technical bar, and write the runbooks and Confluence documentation that let others work independently. ### WHAT WE ARE LOOKING FOR: - Extensive experience with CaC (Configuration as Code) on SaaS platforms. - Confident scripting in Python, Bash and PowerShell, and comfort working with REST APIs. - 7+ years in IT or workplace engineering, including at least 3 years at senior level in a cloud-native, SaaS-first organisation of 1,000+ users. - Deep hands-on Google Workspace administration at enterprise scale, including automation with GAM/GAMADV-XTD3, the Admin SDK APIs or Apps Script. - Production experience designing and running Netskope or a comparable SSE/SASE platform (Zscaler, Prisma Access, Cloudflare One), including ZTNA and DLP. - Strong experience with both Jamf Pro and Microsoft Intune, running a mixed Mac and Windows fleet end to end. - Solid grasp of identity and access: SAML, OIDC, SCIM, MFA, conditional access and device trust. - Clear, confident communication with engineers, stakeholders and non-technical users alike. **Nice to have:** - Admin-level experience with Jira, Confluence and Jira Service Management, including JSM automation and Assets. - Experience in fintech or regulated financial services (FCA, DORA, PCI DSS, ISO 27001, SOC 2). - Working knowledge of GCP and AWS, particularly IAM and networking relevant to ZTNA. - Relevant certifications (Google Workspace Administrator, Jamf 300/400, Netskope NSK200/300, MD-102, Atlassian ACP). ### OUR TECH STACK: - Google Workspace and Google Cloud Platform - Netskope (SSE/SASE) - Jamf Pro and Microsoft Intune - Mac, Windows and ChromeOS endpoints - Okta - C1 - Cisco Meraki - Jira, Confluence and Jira Service Management ### WHAT YOU’LL GET IN RETURN: Our location-specific employee benefits are designed to cater to the unique needs of Tideans: - The gross annual salary for this position ranges from €68,400 to €96,200 but we are also open to discussing the salary further, taking into account your expertise and contributions. - Remote first - 25 days of paid annual leave - 3 paid days off for volunteering or L&D activities - Private Health Insurance - Mental Health Support Platform - FitPass - Family and friendly leave (according to statutory) - Personal L&D budget - Share Options ### TIDEAN WAYS OF WORKING At Tide, we champion a **flexible workplace** model thatsupports both in-person and remote work to cater to the specific needs of our different teams. While remote work is supported, we believe in the power of face-to-face interactions to foster team spirit and collaboration. Our offices are designed as hubs for innovation and team-building, where we encourage regular in-person gatherings to foster a strong sense of community. **#LI-MP1** **#LI-Remote** ### TIDE IS A PLACE FOR EVERYONE At Tide, we believe that we can only succeed if we let our differences enrich our culture. Our Tideans come from a variety of backgrounds and experience levels. We consider everyone irrespective of their ethnicity, religion, sexual orientation, gender identity, family or parental status, national origin, veteran, neurodiversity or differently-abled status. We celebrate diversity in our workforce as a cornerstone of our success. Our commitment to a broad spectrum of ideas and backgrounds is what enables us to build products that resonate with our members’ diverse needs and lives. We are One Team and foster a transparent and inclusive environment, where everyone’s voice is heard. *At Tide, we thrive on diversity, embracing various backgrounds and experiences. We welcome all individuals regardless of ethnicity, religion, sexual orientation, gender identity, or disability. Our inclusive culture is key to our success, helping us build products that meet our members' diverse needs. We are One Team, committed to transparency and ensuring everyone’s voice is heard.* **Disclaimer** *It has come to our attention that individuals or agencies are falsely claiming to represent Tide and are reaching out to candidates regarding job opportunities. Please be aware that:* - *Tide does **not** charge any fees at any stage of the recruitment process.* - *All official Tide job opportunities are listed exclusively on our [**Careers Page**](https://www.tide.co/careers/) and applications should be submitted through this channel.* - *Communication from Tide will only come from an official **@tide****.co** email address.* - *Tide does not work with agencies or recruiters without prior formal engagement, and we do not authorize third parties to make job offers on our behalf.* *If you are contacted by anyone misrepresenting Tide or requesting payment, please treat it as fraudulent and report it to us immediately at [talent@tide.co](mailto:talent@tide.co) Your safety and trust are important to us, and we are committed to ensuring a fair and transparent recruitment process.* **Tide leverages AI to enhance our hiring experience. You can read more about how we use AI in our recruitment process in our [AI Policy](https://assets.ctfassets.net/3h69mkdgxn20/5MFtWSdG8YLKq3jZkK52NY/3f18633073e6cdbd03bba4b9791c64f4/Using_AI_throughout_the_Hiring_Process.pdf).** **Your personal data will be processed by Tide for recruitment purposes and in accordance with* *[Tide's Recruitment Privacy Notice](https://assets.ctfassets.net/3h69mkdgxn20/30JAUcDJMlaCwUKt4zoW0j/dd541981a67b6838d6e54537704bc8aa/Tide_Recruitment_Privacy_Notice_Job_Post_Version.pdf)**.**