In ~1 minute you get: who interviews you, the likely questions answered from your CV, and your CV tailored to this job. Free, no card.

About Allica Bank Allica is the UK’s fastest growing company - and the fastest-growing financial technology (Fintech) firm ever. Our purpose is to help established SMEs, one of the last major underserved opportunities in Fintech. Established SMEs are the backbone of local communities - representing over a third of our economy - yet have been largely neglected both by traditional high street banks and modern fintech providers. Why this role exists? Allica is expanding internationally, establishing a regulated entity in its first international market and deploying the proprietary technology platform there. The platform model is deliberately repeatable, so that further markets can be added if and when the opportunity arises. The purpose of this role is to design and implement a repeatable international platform model, prove it in the first market, and enable each local entity to operate its own identity and local access services within centrally governed technology, security and identity standards. The role owns the international Azure platform end to end, from design and build through ongoing run. Identity is delivered on a build-and-hand-over basis: the role designs and implements each entity's Entra environment, then transitions day-to-day operation to the local team, remaining involved for enhancement rather than implementation. Both sit within a governance model where technical controls are defined centrally by Allica's UK platform and security functions, and each international entity operates as a consumer of those controls with local attestation. Accountabilities Multi-market platform foundations, delivered as code Design and build a parameterised Azure landing zone that can be instantiated per market, covering subscription and management group topology, networking, connectivity, policy assignment, and baseline observability. Deliver the entire estate through Infrastructure as Code with peer review, automated policy compliance checks, and no manual configuration changes. The landing zone is a product, not a project. Make market-specific variation explicit and narrow — a small, documented set of local deltas over a common baseline, rather than a fork. Identity and access across multiple entities Work with central Technology, Identity and Security teams to design and implement a repeatable Entra operating model for international entities, including tenant structure, directory topology, privileged-access patterns, joiner–mover– leaver processes and conditional-access baselines. Lead the technical onboarding and initial implementation of each entity’s Entra environment in line with centrally approved architecture and control standards. Ensure each local entity has the capability, documentation, access model, runbooks and evidence processes required to operate its own Entra tenant dayto-day. Establish a clear handover and assurance model: local entity teams operate workforce identity and local access administration; central teams own the architectural standards and control baseline; the International Platform team leads implementation and, following handover, supports oversight and enhancement rather than day-to-day operation. Work with central identity owners on cross-entity access and material design changes. Local regulatory deltas and exceptions must be documented, evidenced and approved through the central governance process. Regulatory and control assurance Operate the "central controls, local attestation" model: implement Allica's centrally-defined control set in each market, maintain the evidence that demonstrates it, and manage the thin layer of genuine local regulatory delta. Produce and maintain a local-delta attestation template that scales to further markets. Ensure the platform meets DORA and operational resilience obligations — ICT risk management, incident classification and reporting, resilience testing, and third-party ICT arrangements.

Head of Platform Engineering (International)

Don't apply unprepared