Private Cloud Principal Engineer CGEMJP00351503

Job Description

Role Title: Private Cloud Principal Engineer

\n

Duration: contract to run until 25/08/2027

\n

Location: Sheffield. Hybrid, 3 days per week onsite

\n

Rate: up to £702.88 p/d Umbrella inside IR35

\n

\n

Role purpose / summary

\n

\n

As a Principal Engineer in Private Cloud, you'll provide hands-on technical leadership across HSBC's private cloud platform, shaping and improving our virtualisation, container and Kubernetes capabilities, and enabling resilient, secure, high-performing services (including Kafka-based event streaming and microservices platforms). Reporting to the Head of Private Cloud, you'll partner closely with Product Owners, architects and engineering teams across CTO to turn strategy into practical, well-engineered outcomes.

\n

\n

Key responsibilities

\n

\n

\n
• Technical leadership & engineering excellence
\n
• Set engineering direction for private cloud capabilities spanning virtualisation, containers, Kubernetes, Kafka/event streaming, and microservices enablement.
\n
• Act as a senior technical authority, review designs, challenge assumptions, and ensure solutions are supportable, secure, and cost-effective.
\n
• Define and promote engineering standards, reference architectures, patterns and guardrails (think: "paved roads", not "speed bumps").
\n
• Lead the end-to-end design and evolution of private cloud platform components (compute, storage, networking, orchestration, platform services).
\n
• Drive consistent platform capabilities across environments (dev/test/prod), improving reliability, scalability, performance and operability.
\n
• Influence platform roadmaps with Product Owners; translate business and technology needs into actionable engineering plans.
\n
• Kubernetes & container platform
\n
• Own key decisions around Kubernetes platform design: cluster architecture, multi-tenancy, ingress, service mesh (where applicable), policy, secrets, observability, upgrade strategies, and workload onboarding.
\n
• Establish repeatable deployment patterns using GitOps/CI/CD, configuration management, and automation-first approaches.
\n
• Kafka & event-driven platforms
\n
• Provide technical leadership on Kafka platform usage and enablement (topic design patterns, partitioning strategy, resiliency, schema governance, security, monitoring and capacity planning).
\n
• Partner with architects and service teams to adopt event-driven patterns safely and consistently.
\n
• Coach teams on microservices design, domain boundaries, API/event contracts, resiliency patterns, and operational readiness.
\n
• Improve developer experience through templates, golden paths, self-service capabilities, and clear documentation.
\n
• Embed security-by-design and operational excellence: hardening, vulnerability management, identity and access controls, data protection, and auditability.
\n
• Work as a bridge between Product, Architecture and Engineering-getting alignment without boiling the ocean.
\n
• Communicate complex technical topics clearly to mixed audiences; write crisp design docs and influence decision forums.
\n

\n

To be successful in this role, you should meet the following requirements:

\n

\n
• Proven experience as a Principal Engineer / Lead Engineer / Senior Staff Engineer (or equivalent) in large-scale, regulated, enterprise environments.
\n
• Strong background in private cloud / platform engineering, including solid depth in at least two of: Virtualisation technologies (e.g., VMware or equivalent), Containers & Kubernetes (cluster operations, upgrades, networking, multi-tenancy, policy), Kafka/event streaming platforms (architecture, operations, governance)
\n
• Strong engineering fundamentals: distributed systems, networking concepts, performance tuning, fault tolerance and capacity planning.
\n
• Automation mindset with experience in Infrastructure as Code and CI/CD practices (tooling can vary).
\n
• Strong operational and risk awareness: security controls, change management, and production readiness practices.
\n

\n

\n

Desirable skills:

\n

\n
• Service mesh, API gateways, secrets management, policy-as-code.
\n
• Observability platforms (metrics/logs/traces) and practical incident leadership.
\n
• Experience building "platform as a product" capabilities (service catalogue, self-service, developer portals).
\n
• Experience with multi-region / active-active design considerations and resilience testing.
\n

\n

\n

Leadership behaviours:

\n

\n
• We Value Difference: welcomes challenge, encourages diverse views, and makes space for quieter voices in technical discussions.
\n
• We Succeed Together: builds strong partnerships across Product, Architecture and Engineering to deliver shared outcomes.
\n
• We Take Responsibility: makes clear trade-offs, owns decisions, and reduces operational and security risk proactively.
\n
• We Get It Done: drives pragmatic outcomes, removes blockers, and raises engineering quality while moving at pace.
\n

\n

\n

What success looks like:

\n

\n
• Faster, safer onboarding of workloads to the private cloud through repeatable patterns and self-service capabilities.
\n
• Improved platform stability and performance with measurable reliability outcomes (SLOs, reduced incidents, faster recovery).
\n
• Clear, adopted standards for Kubernetes, Kafka and microservices usage across CTO engineering teams.
\n
• Stronger collaboration across Product/Architecture/Engineering with transparent roadmaps and well-governed technical decisions
\n

\n

\n

Key relationships:

\n

\n
• Reports to: Head of Private Cloud
\n
• Works closely with: Product Owners, CTO Architects, Platform/Infrastructure Engineering, Application Engineering teams, Cyber Security, Operations/SRE, and relevant governance forums
\n

\n

\n

All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!

\n

If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.