Luke T
@luket
Platform & DevOps engineer securing GOV.UK One Login with policy-as-code and reliable CI/CD.
What I'm looking for
I’m a Platform & DevOps Engineer operating GOV.UK One Login — a 100+ microservice fleet serving millions of authentications per day on Critical National Infrastructure. I’ve built my day-to-day around delivering 99.9% SLO reliability with a 24/7 on-call rotation, co-authoring blameless postmortems, and driving remediation across cloud, network, and service-quality issues.
I designed and shipped end-to-end CI/CD across a five-stage pipeline (dev → build → staging → integration → production) using CodePipeline, CodeDeploy, SAM, and CloudWatch-alarm-triggered rollback. I wrote a Python/boto3 Lambda that programmatically gates promotions via disable_stage_transition(), and the pipeline has auto-reverted multiple bad production deploys.
I focus heavily on security and compliance through policy-as-code, including driving Cyber Assessment Framework (CAF) compliance and remediating AWS Config conformance violations across the estate. I’ve hardened the supply chain with AWS Signer for Lambda artefact signing, GPG-signed commits, and IAM permission boundaries auto-injected into execution roles, then embedded controls into pipelines and runtime.
I also bring an AI/agentic mindset into production engineering: I built LLM-driven data pipelines in Python/Jupyter (including ticket aggregation and LLM classification) and use Claude Code and Cursor in my engineering workflow. Recently, I led migration to a centralised Terraform module registry adopted by 10+ teams, reviewed 15+ PRs per sprint, and mentored junior engineers.
Experience
Work history, roles, and key accomplishments
Platform & DevOps Engineer
GDS (GOV.UK One Login)
Jul 2024 - Present (1 year 10 months)
Operated a 100+ microservice authentication fleet (1–10M logins/day) to 99.9% SLOs, co-authored blameless postmortems, and drove remediation across cloud, network, and service quality. Designed and shipped a five-stage CI/CD pipeline with automated rollback, delivered CAF compliance via policy-as-code and supply-chain hardening, and implemented circuit breakers to prevent fleet-wide cascades.
Security Analyst
GDS (One Login SecOps)
Jan 2024 - Jul 2024 (6 months)
Built a containerised sandbox to analyse a malicious GOV.UK impersonation app safely and characterise its behaviour. Authored 10+ Splunk SPL detections from Sigma rules (CloudTrail, TxMA, VPC Flow logs), reducing mean-time-to-detect by ~10% as detections fired on real incidents.
Education
Degrees, certifications, and relevant coursework
University of the Arts London
PhD, Creative Computing
Pursuing a PhD in Creative Computing at the University of the Arts London.
University of Nottingham
MSc, Geospatial Data Science
2022 - 2023
Grade: Merit
Completed an MSc in Geospatial Data Science (Merit). Built a national-scale cadastre data pipeline in Python and QGIS using spatial indexing and XGBoost.
Makers Academy
Software Engineering Bootcamp, Software Engineering
2021 - 2022
Completed the Software Engineering Bootcamp at Makers Academy.
University of Sheffield
B.A. (Hons), Urban Studies
Grade: 2:1
Activities and societies: Volunteer mentor for LGBTQ+ homeless young people; long-distance cycling and hiking; working through The Go Programming Language; French (B1).
Completed a B.A. (Hons) in Urban Studies at the University of Sheffield.
Tech stack
Software and tools used professionally
Availability
Location
Authorized to work in
Job categories
Skills
Interested in hiring Luke?
You can contact Luke and 90k+ other talented remote workers on Himalayas.
Message LukeFind your dream job
Sign up now and join over 100,000 remote workers who receive personalized job alerts, curated job matches, and more for free!
