Senior Platform Engineer - CDN & Akamai

Description

IG is a FTSE 100 fintech operating across five continents, serving over 1.3m customers and handling billions of dollars in transactions – built on scale, trust, and proof. We didn't pivot to innovation; it's how we've always operated. What that means for the people who work here is real: genuinely complex problems to solve, the technology and resources to tackle them properly, and the kind of scope that's rare in established businesses.

Nice to have

• Akamai certification in Web Performance, Cloud Security, or Media Delivery

• Other CDN and edge platforms (CloudFront, Cloudflare, Fastly) for comparative or multi-CDN architecture

• AWS networking services (Route 53, CloudFront, ALB/NLB) and hybrid CDN-to-cloud-origin patterns

• Edge compute (EdgeWorkers/EdgeKV), API Gateway, or service mesh for application-layer traffic management

• Akamai DataStream or similar for streaming delivery telemetry into wider observability tooling

• Compliance frameworks such as PCI DSS as they apply to edge and CDN configuration.

How we work

• Lead and Inspire: Drives trust, alignment, and enthusiasm

• Think Big: Focus on the problems that most impact commercial outcomes

• Champion the client: Understand and prioritise client's needs

• Deliver at pace: Push for fast, sustainable growth;

• Raise the bar: Take ownership, be accountable and share feedback

Secure and govern the edge

• Configure and tune edge security controls – Site Shield, network lists and IP allow-listing, WAF, and bot mitigation – as traffic patterns and threats evolve

• Manage the SSL/TLS certificate lifecycle for edge properties in coordination with Venafi, ensuring certificates reach the edge well ahead of expiry

• Maintain an auditable inventory of properties, hostnames, certificates, and CP codes, and lead periodic reviews that surface and remediate configuration drift and stale entries.

Experience level:

• Deep Akamai expertise – property creation, versioning, rule tree configuration, and activation across staging and production via Property Manager (Control Center and PAPI), with the judgement to know which logic belongs at the edge and which doesn't

• Automation and infrastructure-as-code – hands-on with the Akamai Terraform Provider, writing reusable modules that others actually adopt; GitLab CI/CD pipeline experience; and scripting in Python or Bash to automate against vendor APIs

• Routing, DNS, and traffic management – edge hostnames, CP codes, origin and failover behaviour, conditional origins, and traffic steering, with working knowledge of Edge DNS and/or Global Traffic Management for resolution, load balancing, and multi-region routing

• Redirection and rewrite strategy – host- and path-based redirects, rewrites, and Cloudlet policies (Edge Redirector, Forward Rewrite, Visitor Prioritization), including untangling legacy redirect logic without breaking live traffic

• Edge security and certificates – Site Shield, network lists, WAF and bot mitigation, plus SSL/TLS certificate lifecycle management (ideally with Venafi) and a solid grasp of certificate chains, SNI, and secure delivery requirements

• Troubleshooting and delivery observability – Edge Diagnostics, debug headers, mPulse (RUM), and traffic reporting APIs, backed by strong network fundamentals (TCP/IP, DNS, HTTP/HTTPS, routing) and a clear picture of how DNS, CDN, origin, and application layers interact under production load

• Delivering change in a controlled environment – experience working through formal ITSM/change-control processes such as ServiceNow, in regulated or high-availability settings

Diagnose, partner, and share

• Diagnose complex delivery, routing, and performance incidents using Edge Diagnostics, debug and pragma headers, mPulse, and reporting APIs – tracing an issue from DNS resolution through edge and origin behaviour to root cause, then closing the gap that allowed it

• Partner with Platform Managers and application teams to translate hosting and delivery requirements into configuration that is secure, performant, and maintainable, and spread edge knowledge across the wider platform organisation

Own edge delivery and routing

• Own the design, configuration, and operational health of IG's Akamai estate across staging and production networks, in line with change control

• Design and maintain URL redirection, rewrite, and forwarding logic – 301/302, host- and path-based, and Cloudlet-driven – across IG's public and internal domains, rationalising inherited redirect chains as you go

• Configure routing and origin behaviour, including edge hostnames, CP codes, conditional and dynamic origin selection, failover, and load balancing to support multi-origin, multi-region delivery

• Set caching and delivery strategy – compression, HTTP/2 and HTTP/3, image and video delivery, API acceleration – and run purge and cache invalidation workflows that support release and incident response

• Support multi-CDN and failover strategy through Global Traffic Management, and contribute to disaster recovery and resilience planning for edge delivery.

Automate the estate and enable self-service

• Lead the migration of Akamai configuration from manual Control Center changes to a Terraform-first workflow, building reusable, well-documented modules for properties, rule trees, and DNS that other teams can safely consume

• Build self-service paths for routine edge changes – new hostnames, redirects, caching rules – wrapped in policy checks, automated validation, and staging tests that catch mistakes before they reach production

• Integrate edge configuration into GitLab CI/CD alongside ServiceNow change control, so every property and DNS change is peer-reviewed, tested, and promoted through environments the same way each time

• Build tooling around Akamai's APIs (Python, Bash) that removes repetitive operational work – bulk changes, certificate expiry checks, drift detection, and inventory reporting.