Senior SRE

WPP is the trusted growth partner for the world’s leading brands. We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow. For more information, visit WPP.com. Role Purpose: WPP is undergoing an exciting global transformation, and we're looking for a passionate and driven Senior Site Reliability Engineer to join our dynamic and innovative team This leadership opportunity is a great fit for someone who blends hands-on coding expertise with a strategic understanding of modern application architecture, cloud-native technologies, and agile team collaboration within the media and marketing landscape. We encourage applications from a diverse range of backgrounds and experiences. Key Responsibilities: - Design and maintain safe deployment patterns (blue-green, canary, progressive delivery) using ArgoCD for GitOps sync and Kargo for environment promotion across dev, staging and production. - Instrument logs, metrics, traces and alerts to improve signal and reduce noise; define SLIs and SLOs with service owners and drive alerting from them. - Tune and troubleshoot GKE workloads: autoscaling (HPA/VPA, cluster autoscaler), node pool strategy, network policies, resource requests/limits and workload isolation. - Build and maintain reusable Terraform modules for core infrastructure (VPCs, GKE, CloudSQL, Pub/Sub, IAM, secrets, Cloudflare), with consistent naming, tagging and policy enforcement across environments and cloud providers. - Lead or support incident response, diagnose production issues from telemetry, run blameless postmortems and drive long-term fixes to completion. - Detect and eliminate configuration drift; standardize secrets handling, short-lived credentials and environment parity. - Automate operational toil with Python and shell scripting and harden CI/CD pipelines with clear rollout-readiness standards. Skill Requirements: We understand that candidates may not have every single skill listed below. We encourage you to apply if you possess a strong foundation in product ownership and a willingness to learn and grow. - Have 4–6+ years of experience in backend or infra-focused engineering roles (e.g., SRE, platform, DevOps, or fullstack), with at least 2 years owning production systems at scale. - Can confidently write or review production-grade code and infra-as-code (Terraform, Helm, GitHub Actions, etc.). - Deep hands-on Kubernetes experience in production, ideally GKE, including autoscaling, ingress/gateway strategies and network policies. - Solid GCP fundamentals (IAM, VPC design, Workload Identity, Secret Manager, CloudSQL performance characteristics) and working experience with at least one major cloud (AWS or Azure or GCP). - Think in systems: you understand cascading failure, timeout boundaries, dependency health, and blast radius. - Regularly contribute to incident mitigation or long-term fixes (not just closing alerts). - Can influence through well-written PRs, documentation, and thoughtful design reviews. - Hands-on experience with Cloudflare or a comparable edge/CDN/WAF platform. Nice to have: - Experience with Kargo or similar progressive promotion tooling (Argo Rollouts, Flagger).Experience developing or integrating Kubernetes operators. - Familiarity with service-level indicators (SLIs), service-level objectives (SLOs), and structured alerting. - Building or integrating Kubernetes operators and CRDs. Tools & Expectations: - Datadog - Monitor infrastructure health, capture service-level metrics, reduce alert fatigue through high signal thresholds. - PagerDuty - Own incident management pipeline. Route alerts by severity and align with business SLAs. - GKE / Kubernetes - Improve cluster stability and workload isolation. Define auto-scaling configurations and tune for efficiency. - ArgoCD - Keep releases consistent across clusters, monitor sync health, and define safe promotion gates between environments. - Helm / GitOps - Validate release consistency across clusters. Monitor sync status and rollout safety. - Terraform Cloud - Support DR planning and detect infrastructure changes through state comparisons. - CloudSQL - Diagnose DB and networking issues. Monitor latency, enforce access patterns, and validate WAF usage. - Cloudflare - Manage DNS, WAF, rate limiting and caching; diagnose edge latency and validate security rules. - Secret Management - Audit access to secrets, apply short-lived credentials, and define alerts for abnormal usage. - Python / Bash - Automate toil, build internal tooling, and script diagnostics. We believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we’ve adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process. WPP is an equal opportunity employer and considers applicants for all positions without discrimination or regard to particular characteristics. We are committed to fostering a culture of respect in which everyone feels they belong and has the same opportunities to progress in their careers. Please read our Privacy Notice (https://www.wpp.com/en/careers/wpp-privacy-policy-for-recruitment) for more information on how we process the information you provide.