About This Role
This engineering-focused role involves joining a hands-on cloud security engineering team to support secure cloud infrastructure and delivery pipelines. You will be responsible for implementing security controls directly within cloud infrastructure and CI/CD pipelines rather than providing purely advisory or architectural guidance.
Responsibilities
- Define and deploy AWS infrastructure using Terraform, embedding security controls such as IAM policies, network segmentation, encryption, and logging
- Implement and maintain preventative and detective AWS security guardrails, including Service Control Policies, AWS Config, Security Hub, and Guard Duty
- Integrate security testing into GitHub Actions pipelines, including SAST, dependency scanning, IaC scanning, and secrets detection
- Triage and address security findings identified through CI/CD security tooling
- Implement secrets and key management in line with security policies
- Develop Python and TypeScript automation and tooling to support vulnerability management and security control evidence collection
- Produce security control evidence suitable for assurance activities such as CAF, Gov Assure, or equivalent
- Maintain technical documentation and sprint artifacts using Confluence and Jira
Requirements
- Active UK SC Clearance in place at mobilization
- Strong hands-on AWS engineering experience with a clear focus on cloud security and identity
- Strong production experience with Terraform, including reusable module design and state management
- Hands-on Python and TypeScript experience
- Strong GitHub and GitHub Actions experience, including security tooling within pipelines
- Experience with cloud security controls and secure-by-design principles
- Experience implementing security controls as code
Nice to have:
- AWS Security Specialty or AWS Solutions Architect Associate certification
- UK public sector delivery experience
- Container security experience with ECS or EKS
- Exposure to NCSC guidance, Cyber Assessment Framework (CAF), or Cyber Essentials Plus
Important Details
- Contract: Up to 12 months, Outside IR35
Extra Section: Security Clearance
- Active SC Clearance required at mobilization
