Site Reliability Engineer + SecOps

Bottomline

↗

Software Development 👥 1001 employees 📍 Portsmouth, NH, US

Bottomline helps businesses transform the way they pay and get paid. A global leader in business payments and cash management, Bottomline’s secure, comprehensive solutions modernize payments for busi…

Why Choose Bottomline?

Are you ready to transform the way businesses pay and get paid? Bottomline is a global leader in business payments and cash management, with over 35 years of experience and moving more than $16 trillion in payments annually. We're looking for passionate individuals to join our team and help drive impactful results for our customers. If you're dedicated to delighting customers and promoting growth and innovation - we want you on our team!

The Role

Bottomline is looking for a Site Reliability Engineer with SecOps experience to grow with us in a Hybrid work environment out of our Theale, Reading UK office!

Candidates for this position must be authorized to work in the United Kingdom on a full-time basis for any employer without restriction.

Visa sponsorship will not be provided for this position.

The Site Reliability Engineer will work on many SecOps related tasks however this will not be their only focus!

We are looking for someone who is hands on and naturally steps into leadership — someone who learns fast, dives into complex topics, and takes ownership of the roadmap and outcomes across security and reliability.

How you’ll contribute:

Strategy & Cross Team Ownership

• Shape and execute the SRE roadmap; author design docs; run design reviews; align stakeholders and timelines.
• Mentor engineers; drive knowledge sharing, transparent status/reporting, and continuous improvement.
• Own the vulnerability lifecycle end to end: discovery, triage, risk-based prioritization, remediation, verification, and reporting.
• Operate and improve scanning across servers, containers, and images; maintain accurate in scope asset inventories.
• Plan/execute patch cycles for Linux and Windows; validate changes in lower environments; maintain rollbacks and change controls.
• Embed security in CI/CD (SAST/DAST, dependency scanning, SBOM + signing, policy checks); enforce minimum baseline policies for container images.
• Own certificates, keys, and secrets lifecycle with automated rotation and renewal.
• Partner with Security/GRC on policies, audits, evidence; document exceptions and time-bound risk acceptances.

SRE & Reliability

• Define SLOs/SLIs and manage error budgets; lead incident response and post incident improvements; coach on-call practice.
• Build and operate observability (metrics/logs/traces) using OTEL and Grafana; automate runbooks to reduce MTTR.
• Engineer resilient CI/CD (GitLab, Jenkins): progressive delivery, safe rollbacks, change validation, and release quality gates.
• Design and maintain Terraform modules and configuration management (Puppet/Ansible); standardize platform baselines (OS, Kubernetes, middleware) and enforce policy-as-code.
• Consolidate and rationalize technical stacks to improve operational readiness and risk profiles.
• Sharing ideas with the team and management to improve security and reliability
• Proposing new security tools, automation and processes
• Embracing new technologies and building business cases for their adoption

What will make you successful:

• Fluent in English
• Systems: Strong Linux (RHEL/CentOS) and/or Windows Server administration in production environments.
• Vulnerability & Patch: Hands-on with scanners (e.g., Qualys/Defender VM) and patch orchestration; strong change control and rollback strategies.
• IaC & Config: Terraform; Ansible/Puppet (idempotent patterns); OS native patching (yum).
• CI/CD & Git: Working knowledge to embed scanning and compliance checks in pipelines (GitLab/Jenkins).
• Containers/K8s: Familiarity with Docker/Kubernetes and image scanning policies.
• Observability & SRE: Practical OTEL instrumentation and Grafana dashboards; SRE principles for availability and MTTR reduction.
• Security: Certificates, encryption standards, secure configuration baselines; secrets management.
• Scripting: Proficiency in Bash/PowerShell; working knowledge of Python or Go.
• Soft skills • Strong security and customer-service mindset
• Rigorous, methodical and risk-aware
• Recognized technical leadership and ownership
• Ability to remain calm and decisive under pressure
• Autonomous but able to work effectively within teams
• Excellent communication and stakeholder management skills

What We Offer:

• Competitive salary and benefits package.
• Opportunities for professional growth and advancement.
• A collaborative and innovative work environment.
• Flexible working arrangements.