Junior Platform Engineer

The Role

Fexco's Platform & Infrastructure Engineering teams build and run the shared services the wider engineering organisation depends on, the paved roads that let engineering teams ship product without infrastructure becoming a bottleneck. We work primarily in Azure, write Terraform, operate Kubernetes, and build the self service tooling that ties our service catalog together. Fexco's principle is, you build it, you own it. Platform provides the paved roads; application teams own their applications. Fexco thinks IaC first. If your instinct is to click through a console to fix something, this is not the role for you.

This is a Junior Platform Engineer position. You will work alongside mid and senior Platform Engineers on the inner workings of these services, including Kubernetes clusters, Terraform modules, identity and networking, GitOps delivery with GitLab and ArgoCD, observability on Grafana Cloud, and the platform tooling that makes all of it self service. We are also building an Internal Developer Platform (IDP), which you will help contribute to as you grow.

This is a Platform Engineering role, not DevOps

Application teams own their own pipelines and deployments. Your focus is the shared services, tooling, and infrastructure they run on.

Core Responsibilities

• Contribute to well scoped components of our multi tenant Kubernetes platform on AKS under the guidance of senior Platform Engineers.
• Deploy, observe, and help operate workloads on Azure Kubernetes Service (AKS).
• Read, extend, and contribute to Terraform configurations using established module patterns.
• Write basic Bash and Python automation to reduce manual work and eliminate toil.
• Implement pre designed network and security controls: network policies, RBAC, identity and access.
• Help build and maintain services in the catalog that application teams consume.
• Contribute to GitOps delivery using ArgoCD, Helm, and Kustomize.
• Write clear documentation and runbooks so platform knowledge stays in the team, not in individuals.
• Share on call duties with the wider team as you build operational experience.

Essential Skills Cloud

• Some production or near production exposure to a major public cloud. Azure is preferred; AWS or GCP experience is also fine.
• Familiarity with cloud networking fundamentals: VPCs or VNets, subnets, peering, VPNs.

Kubernetes

• Hands on experience deploying workloads on Kubernetes (AKS, GKE, EKS, or self managed).
• Understands core concepts: pods, deployments, services, RBAC, namespaces.

Infrastructure as Code

• Comfortable reading and modifying Terraform; understands module composition.
• Comfortable writing basic Bash scripts for everyday automation; willing to learn more as needed.
• Some Python for tasks beyond simple shell scripts.

Version Control and CI/CD

• Git fluency beyond basic commits.
• Exposure to CI/CD pipelines (GitLab, GitHub Actions, or similar).

Networking and Security

• TCP/IP, DNS, and L2 to L7 fundamentals.
• Basic understanding of identity and access control (SAML, OIDC).

Mindset

• Infrastructure as Code first.
• Learning mindset, takes feedback and runs with it.
• Comfortable working in a remote first, written communication environment.

Nice to Have

• Kubernetes KCNA (Kubernetes and Cloud Native Associate) or equivalent foundational certification.
• Experience with Grafana and Prometheus.
• Exposure to ArgoCD or other GitOps tooling.
• Experience in regulated environments (financial services, healthcare, public sector).
• Contributions to open source infrastructure or platform tooling.

What Good Looks Like in Year One

• Paired effectively with senior engineers and picked up core platform patterns.
• Shipped scoped pieces of the platform independently by the end of year one.
• Contributed to platform documentation, runbooks, and self service tooling.
• Built operational confidence through shared on call and incident participation.

Note on Travel

This role requires occasional travel to our Kerry office for team meetings and collaboration. While day to day work can be hybrid, you need to be willing to travel to Kerry when needed.