At Graphcore, we’re building the future of AI compute.

We’re a team of semiconductor, software and AI experts, with deep experience in creating the complete AI compute stack - from silicon and software to infrastructure at datacenter scale.

As part of the SoftBank Group, backed by significant long-term investment, we are delivering key technology into the fast-growing SoftBank AI ecosystem.To meet the vast and exciting AI opportunity, Graphcore is expanding its teams around the world.We are bringing together the brightest minds to solve the toughest problems, in a place where everyone has the opportunity to make an impact on the company, our products and the future of artificial intelligence.

Job Summary

We are seeking a Secrets Engineer to lead the development, deployment, and ownership of a secure, scalable secrets-management platform for the entire organization. You will build a new enterprise-grade HashiCorp Vault or OpenBao environment from scratch. It must be highly available, resilient, and suited for long-term use. 

This is a strategic role: you will deliver and operate the central platform. You will also collaborate with engineering, security, and operations teams that manage localized or ad-hoc secrets systems. A key part of your mission is to unify and standardize these methods across Graphcore, ensuring consistent guidelines, smooth migration, and organization-wide support. 

The Team

You’ll be joining a multidisciplinary team with strong technical skills and a very encouraging culture. We work closely together and regularly share knowledge, and your skills will make a direct impact on our business. It’s an exciting and pivotal moment for us right now, with plenty of new projects ahead. If you’re looking to solve interesting problems and see your work deliver real-world results, this is the team for you.

Responsibilities and Duties

Platform Ownership & Implementation

• Build, deploy, and operate an organization-wide HashiCorp Vault or OpenBao platform from scratch, ensuring high availability, scalability, and strong security posture.

• Define architecture for clustering, storage backends, auto-unseal, disaster recovery, and performance replication.

• Develop migration strategies and reference frameworks that allow other teams to move from their current secrets tools to the central platform.

• Standardization & Governance

• Collaborate with groups from engineering, security, and operations to merge various secrets stores into one unified system.

• Develop organizational standards, policies, access models, and workflows to ensure consistent, secure usage of the platform.

• Advocate for guidelines in secret lifecycle management, authentication methods, and identity federation.

Integrations, Enablement, and Developer Experience

• Build tooling, automation, onboarding guides, and libraries to help teams adopt Vault/OpenBao easily and accurately.

• Integrate Vault/OpenBao with CI/CD systems, cloud platforms, and internal services.

• Deliver workshops, training, and direct technical support to accelerate adoption.

Research & Advanced Security Capabilities

• Evaluate approaches for secure password storage for individual users—either within Vault/OpenBao or by assessing alternatives such as BitLocker or other credential-management systems.
• Conduct an initial study on the feasibility of implementing SPIFFE/SPIRE for workload identity, attestation, and zero-trust authentication, outlining future pathways and recommendations.

Collaboration & Cross-Team Work

• Partner with HPC, Networking, Storage, Security, and Cloud Engineering teams to ensure seamless integration of secrets workflows into broader infrastructure systems.
• Find opportunities to improve security posture and operational efficiency through automation and standardized secrets management. 

Candidate Profile

Essential:

• 4+ years in DevOps, SRE, security engineering, or platform engineering roles.
• Direct experience deploying and operating HashiCorp Vault, OpenBao, or a similar enterprise secrets-management system.
• Strong understanding of authentication backends (OIDC, LDAP, cloud IAM), secret engines, PKI, encryption, and token/credential lifecycle.
• Solid Linux administration and shell scripting experience.
• Experience with Infrastructure-as-Code (Terraform preferred) and CI/CD automation.
• Strong communication skills with the ability to collaborate across multiple engineering and security fields.

Desirable:

• Experience crafting HA/DR architectures for Vault/OpenBao.
• Experience connecting Vault with cloud platforms (AWS, Azure, GCP) and CI/CD pipelines.
• Knowledge of SPIFFE/SPIRE, workload identity, or zero-trust architectures.
• Understanding of modern security tooling, certificate management, or identity platforms.
• Python programming experience for automation and tooling.

We welcome people of different backgrounds and experiences; we’re committed to building an inclusive work environment that makes Graphcore a great home for everyone. We offer an equal opportunity process and understand that there are visible and invisible differences in all of us. We can provide a flexible approach to interview and encourage you to chat to us if you require any reasonable adjustments.

Location: Home Based - with daily travel to one of our three sites in Basingstoke (primary destination), Bristol (primary destination) and Banbury

About The Team:

The HelloFresh Delivery Network (HFDN) is a critical part of our UK growth strategy, improving customer experience while reducing cost to serve. As we expand the network, we are looking for a Regional Manager for the West, responsible for the performance, stability, and startup/scale-up of three delivery sites, including one small satellite location.This role sits at the heart of execution. You will own day to day regional performance across safety, service, and cost, while also playing a key role in expanding capability, embedding standards, and preparing sites for growth. The role requires a strong grounding in B2C home delivery operations, confidence managing multiple locations, and the ability to translate plans into consistent on-the-ground execution.

What You Will Be Doing:

• Own end-to-end performance across three HFDN sites in the West, ensuring consistent standards despite differences in scale and maturity
• Act as the senior operational lead for the region, accountable for service, cost,  safety, DSPs.
• Stabilise and scale new and smaller sites, ensuring they are operationally sound and aligned to HFDN ways of working
• Oversee final mile delivery operations, from box handover and van loading through to route execution
• Drive delivery accuracy, service reliability, and customer experience across all sites
• Work closely with planning and central teams to ensure routes are executable and efficiently delivered on the ground
• Work closely with central Logistics and HFDN development teams to embed new processes, tools, and standards
• Identify operational risks and improvement opportunities, using data to drive decisions
• Support future site launches and expansion activity in the region, acting as a key operational input
• Ensure high standards of health and safety and compliance across all sites
• Oversee cost control, invoice approval, and regional budget adherence
• Handle escalations relating to customer complaints, insurance claims, and delivery incidents

Who You Are:

• Proven experience leading multi-site logistics or home delivery operations, ideally within B2C, FMCG, or last-mile environments
• Comfortable owning regional performance rather than a single site
• Strong people leader with experience managing Drivers and site teams
• Confident operating in fast-changing environments, including new site launches or expansion phases
• Solid understanding of fleet operations, driver models, and final mile delivery challenges
• Data-driven, with the ability to balance cost, service, and safety
• Experienced in health and safety, incident management, and operational risk
• A demonstrable track record of reducing errors and improving operational performance at scale

What you will get in return:

• 70% off HelloFresh or Green Chef boxes
• Company pension scheme
• Gym membership
• Bupa private medical insurance (including dental & family cover options)
• Mental health first aiders and an employee assistance programme
• Dog friendly office! (London site only)
• Nursery support scheme
• Cycle to work scheme
• Group Life Assurance

Shifts: 6am to 3pm, Saturday to Wednesday, flexibility required

Next steps: Your application will be reviewed and if successful, a member of the Talent Acquisition Team will be in touch within 2 weeks.

You are required to cooperate with HelloFresh in all health and safety matters. You are responsible for ensuring you take reasonable care of your own health, and safety as well as others who may be affected by the work activities you undertake. You must report incidents immediately and actively raise health and safety-related concerns to your Line Manager. As part of our commitment to maintaining a safe and secure environment, we will process Disclosure and Barring Service (DBS) checks to the successful individual. Failure to disclose relevant information at application or throughout the process could affect your employment with the company. 

If you are currently a HelloFresh employee, please make sure you have discussed your application with your Line Manager.

To be considered for this role, you’ll need to have the independent right to work in the UK, as we're unfortunately unable to provide sponsorship at this time.

The Details

Salary: £65,000 - £95,000 DOE

Location: 3 days onsite in Bristol, 2 days from home

Security Clearance: Eligible for SC and/or DV Clearance  

The Role 

As a Site Reliability Engineer, you’ll play a key role in designing, building, and maintaining resilient systems that support critical operations. You’ll work closely with cross-functional teams to ensure our platforms are scalable, secure, and reliable. 

This is a hands-on role where you’ll have the opportunity to influence technical direction, improve system performance, and contribute to meaningful projects. 

What You’ll Be Doing 

• Designing and maintaining reliable, scalable infrastructure  

• Monitoring system performance and proactively resolving issues  

• Automating processes using tools such as Ansible to improve efficiency and consistency  

• Collaborating with engineers and stakeholders across the business  
• Supporting continuous improvement of systems, tools, and practices  

What We’re Looking For 

We recognise that no one ticks every box. If your experience aligns with most of the below, we’d love to hear from you: 

• Experience in Site Reliability Engineering, DevOps, or similar roles  

• Strong knowledge of cloud platforms (e.g. AWS, Azure, or GCP)  

• Experience with infrastructure as code and configuration management tools (e.g. Terraform, Ansible)  

• Familiarity with CI/CD pipelines and automation practices  

• Understanding of monitoring, logging, and alerting systems  

• A collaborative mindset and a passion for problem-solving  

What You’ll Get 

• Competitive salary and benefits package  

• 28 days’ holiday plus bank holidays, with the option to buy or sell an additional week  

• Annual bonus  

• 8% non-contributory pension  

• Private healthcare and life insurance  

• Enhanced parental leave 

• Flexible working  

• Opportunities for learning, development, and career progression  

• Supportive and inclusive team environment  

• The chance to work on meaningful projects