Software Engineer II, DevOps

About Audax audax means courage. To have the courage to change the banking scene, eliminating constraints caused by existing legacy infrastructure. Our mission is to empower banks and financial institutions to scale and modernise at speed, reaching new customers without breaking the bank.

We began our journey supplying services to and powering Standard Chartered’s white-label plug and play Banking-as-a-Service (BaaS) solution, Standard Chartered nexus, through our technology capabilities. At audax, we seek go-getters who are hungry for growth and can bring fresh perspectives.

Website - https://audax.io/

Summary The DevX team is looking for a DevOps Engineer to help build and maintain the build platform, reusable CI/CD components and DevSecOps tooling used for software delivery across the organisation. This is a hands-on software engineering role: you will read, write, debug and test pipeline logic, shared libraries and automation code in Java/Groovy and TypeScript. It is not a Terraform/Kubernetes-only DevOps position.

You will work on clearly assigned tasks across CI/CD pipelines, container build workflows and security tooling integrations, with guidance from senior engineers. You will help keep pipelines reliable, support security scanning workflows, and build experience across platform engineering and developer experience practice.

Responsibilities

• Deliver assigned CI/CD pipeline tasks (Jenkins and/or GitHub Actions) reliably and within sprint expectations.
• Develop and maintain shared build library components (Groovy/Java) and reusable GitHub Actions workflows (TypeScript/JavaScript) as directed by senior engineers, with appropriate tests for owned changes.
• Support base image build and promotion (ECR, GHCR), release branch workflows, package publishing and build promotion for assigned services, in line with the release calendar.
• Implement assigned security tooling integrations (SAST/SCA, secret scanning, container scanning, SBOM generation) following established configurations, and assist with image signing (Cosign) and admission policy (Kyverno) tasks under senior guidance.
• Contribute to integrations with the vulnerability management and application metadata platforms (APIs, quality gates, pipeline checks) on assigned tasks.
• Troubleshoot assigned build failures and pipeline issues, escalating complex or cross-team blockers early.
• Contribute to upkeep of build/CI monitoring and alerting (Grafana, Prometheus, Loki or equivalent), the integration-test platform and developer-facing test automation workflows.
• Maintain build specifications and repository onboarding configurations for new or migrated services, using scripting (Python, Bash, Groovy, TypeScript) to automate assigned build and pipeline tasks.
• Handle BAU support requests from product squads through agreed support routes (unblock builds, clarify pipeline behaviour) and escalate infrastructure issues early.
• Write and maintain runbooks and developer-facing documentation for owned changes, and take part in team routines (stand-ups, reviews, pairing), raising clarifications and dependencies early to avoid rework.

Requirements

• Strong, demonstrable proficiency in Java/Groovy and TypeScript, including reading, debugging, extending and testing production pipeline and platform code. Terraform/Kubernetes knowledge alone is not sufficient.
• Working proficiency in Gradle-based builds and unit testing (Spock/JUnit for Groovy/Java; Jest or equivalent for TypeScript).
• Hands-on experience maintaining Jenkins shared libraries and/or GitHub Actions reusable workflows, beyond writing YAML or Terraform modules.
• Experience in DevOps, platform engineering or a related discipline, with practical CI/CD exposure and working knowledge of Git workflows (branching, PR flows, release tagging) and GitHub CLI.
• Experience with Docker container builds and registries (ECR, GHCR or similar), and basic AWS knowledge (ECR, IAM, networking fundamentals).
• Scripting proficiency in Python and/or Bash, alongside Groovy and TypeScript.
• Working knowledge of Kubernetes fundamentals (CKAD preferred), with exposure to Infrastructure as Code (Terraform and/or Ansible) and GitOps patterns (Argo CD, Helm or equivalent) for troubleshooting build-to-deploy issues.
• Familiarity with integrating security scanning tools (SAST, SCA, secret scanning, container scanning, SBOM) into CI/CD, and exposure to dependency update an…