Platform Engineer – Enterprise Golden Paths & Automated Governance

Platform Engineer – Enterprise Golden Paths & Automated Governance GCL: D3 Introduction to role: Do you want to build the clear routes that ensure secure delivery becomes the standard across a global enterprise? Can you turn sophisticated security and compliance controls into simple, reusable developer experiences that teams love to adopt?

About AstraZeneca

• When we put unexpected teams in the same room, we unleash bold thinking with the power to inspire life-changing medicines.
• In-person working gives us the platform we need to connect, work at pace and challenge perceptions.
• Join us in our unique and bold world.
• Here, platform engineering meets large-scale impact: you will help put data and technology at the heart of how we discover, develop, and deliver medicines.
• We bring together unexpected combinations of specialists—engineers, scientists, architects, product leaders—around the same table to unlock aggressive thinking and practical outcomes.
• You will build from scratch as part of an inclusive group of self-starters who share ideas openly, challenge with respect, and take accountability for making things real.
• We value patience alongside ambition, learn fast from real-world use, and hold high ethical standards because the stakes are patients’ lives.
• If you’re ready to build the enterprise golden paths that make secure delivery the default and accelerate life-changing science, send us your CV and show us the platform you would create next!
• We are committed to building an inclusive and diverse team representing all backgrounds, with as wide a range of perspectives as possible, and harnessing industry-leading skills.
• We believe that the more inclusive we are, the better our work will be.
• We welcome and consider applications to join our team from all qualified candidates, regardless of their characteristics.

Responsibilities

• In this role, you will develop the outspoken pipelines, infrastructure modules, and automation that power efficient, secure software delivery at scale.
• Your work will reduce friction for engineering teams, embed security-by-design from the start, and accelerate the delivery of technology that underpins life-changing science for patients worldwide.
• You will partner closely with engineering, security, architecture, and operations to shape enterprise-grade platform capabilities—hands-on and end-to-end.
• Expect to start by shipping high-impact, reusable assets and evolve into guiding standards and adoption across hundreds of engineers, always balancing deep technical difficulty with practical, outcome-focused delivery.
• Golden Paths & Shared GitHub Actions: Design, build, and version enterprise-grade shared GitHub Actions (Composite Actions and Reusable Workflows) and standardized delivery templates to create secure, automated "Golden Paths" across product teams.
• Build and maintain secure, modular Terraform modules and IaC assets, versioned and documented for broad reuse and easy consumption.
• Integrate SAST, DAST, SCA, SBOM generation, and supply chain protections into default delivery workflows, shifting security left through automation and policy-as-code guardrails.
• Create scalable, resilient CI/CD patterns aligned to enterprise standards, applying least privilege and reducing configuration risk to strengthen operational reliability.
• Develop automation services and developer tooling in Python or Golang that enable self-service onboarding, secure defaults, and consistent quality checks.
• Chip in to solutions spanning cloud, serverless, containerized, compute, and hybrid environments, producing reference architectures, diagrams, and implementation guidance that accelerate adoption.
• Define and execute testing strategies for infrastructure code and automation (unit, integration, and environment validation) to ensure repeatable, high-quality delivery.
• Partner with product and platform consumers to drive adoption, capture feedback, and iterate on patterns and assets to enhance developer experience and business value.
• Apply AI tools and techniques where appropriate to improve development speed, quality, secure design, and innovation, sharing learning and elevating team practices.

Requirements

• Significant 6+ years of experience in platform engineering, cloud engineering, DevSecOps, or a related technical engineering discipline.
• Hands-on experience authoring, testing, and maintaining centralized, reusable GitHub Actions (Composite Actions, Reusable Workflows) across an enterprise organization.
• Understanding of Semantic Versioning for GitHub Actions (@v1, @v2), supply chain pinning, and securing pipeline-to-AWS authentication using OpenID Connect (OIDC) Strong experience with AWS, including services related to compute, networking, security, and serverless architectures.
• Advanced expertise in Terraform and reusable infrastructure-as-code design.
• Strong scripting or software engineering capability in Python or Golang.
• Strong understanding of DevSecOps principles and controls, including SAST, DAST, SCA, SBOM, and software supply chain security.
• Experience designing and implementing secure CI/CD pipelines within enterprise environments.
• Solid grasp of security-by-design, the least privilege, and secure architecture principles.
• Experience building scalable, reusable, modular platform solutions rather than one-off implementations.
• Ability to create clear and effective user documentation and architecture artefacts.
• Collaboration skills and ability to work optimally across engineering, security, and architecture teams.
• Bachelor’s degree in Computer Science, Software Engineering, Information Technology, or a related field, or equivalent practical experience.
• Relevant certifications in cloud, security, infrastructure, or DevOps/DevSecOps would be advantageous.

Preferred

• Experience with Kubernetes and container orchestration technologies.
• Exposure to hybrid or on-premises environments.
• Familiarity with Azure cloud services.
• Knowledge of modern application stacks such as Java, .NET, or React.
• Experience applying AI tools to development, testing, secure design, or engineering productivity improvement.
• Experience with infrastructure testing frameworks such as Terratest.

Benefits

• But that doesn't mean we're not flexible.

• That's why we work, on average, a minimum of three days per week from the office.
• We balance the expectation of being in the office while respecting individual flexibility.

• Date Posted 21-Oct-2026 Closing Date 05-Nov-2026 AstraZeneca embraces diversity and equality of opportunity.
• We comply with all applicable laws and regulations on non-discrimination in employment (and recruitment), as well as work authorization and employment eligibility verification requirements.