OB Collective develops independent verification technology for organisations operating in government, regulated and high-assurance environments.
Our work is concerned with establishing reliable evidence about information and automated actions before organisations rely on them.
We’re building a senior technical team for a six-to-twelve-month engagement on a UK public-sector R&D programme focused on the cybersecurity and operational assurance of AI agents.
We’re looking for a Senior Platform & Test Engineer – DevSecOps / Performance to develop the engineering infrastructure and test environments required to evaluate the software reliably.
As AI agents gain access to organisational data, credentials, tools, APIs and enterprise systems, organisations need stronger evidence of how these systems behave under operational load, failure and security threats.
The programme will extend an existing verification capability into agentic environments and evaluate its performance, resilience and security under representative conditions.
There is an existing technical capability and a defined research direction.
A significant part of the challenge is empirical: establishing reproducible measurements for performance, evidence loss, system scale, recovery and failure, rather than relying on theoretical assumptions about reliability.
You will work closely with the Principal Technical Lead, software engineers, integration specialist and independent security testers to build secure development environments, automated test infrastructure and repeatable deployment processes.
This role combines platform engineering, DevSecOps and technical test engineering.
We need someone who can build robust infrastructure but also design meaningful performance and resilience tests, instrument software behaviour and produce defensible measurements.
What you’ll do
- Build and maintain reproducible development, test and evaluation environments.
- Own CI/CD pipelines, release automation and infrastructure as code.
- Establish reliable containerised build and deployment processes.
- Implement secure development practices, dependency controls and software composition analysis.
- Produce software bills of materials (SBOMs) and supporting software supply-chain evidence.
- Maintain consistent environment configuration, secrets management and relevant key-handling arrangements.
- Develop automated performance, load and scale-testing capabilities.
- Instrument latency, throughput, resource consumption, failure rates and evidence loss.
- Build test environments capable of exercising representative multi-agent and distributed workloads.
- Support fault injection, degraded conditions, recovery and resilience testing.
- Establish self-hosted, hybrid and restricted/disconnected deployment environments.
- Support independent security testing and red-team activities.
- Make remediation, regression testing and re-testing reproducible.
- Produce repeatable release artefacts and deployment documentation suitable for subsequent operational trial.
What we’re looking for
- Strong hands-on platform, DevOps, SRE or DevSecOps engineering experience.
- Experience designing, building and maintaining CI/CD environments.
- Strong containerisation and infrastructure-as-code skills.
- Good Linux and cloud-platform engineering capability.
- Experience automating test environments and repeatable deployments.
- Practical understanding of secure builds, dependency controls and secrets management.
- Experience implementing or supporting automated performance, load or resilience testing.
- Ability to instrument systems and measure software behaviour, rather than relying solely on infrastructure monitoring.
- Strong troubleshooting and systems-debugging skills.
- Ability to work closely with software engineers while maintaining reproducible environments.
- An evidence-driven approach to testing operational limits, failure behaviour and recovery.
Preferred experience
- Microsoft Azure.
- Docker, Kubernetes and Terraform.
- Performance or load-testing frameworks.
- Distributed-system benchmarking.
- Fault injection or resilience engineering.
- SBOM generation and software supply-chain security.
- Software composition analysis tools.
- On-premises, disconnected or restricted-network deployments.
- Technical R&D or independent security evaluation.