Cloud Security Engineer

Summary: The Cloud Security Engineer role focuses on designing, implementing, and maintaining secure cloud infrastructure primarily on AWS. The position requires collaboration with security and application teams to enhance security initiatives and CI/CD pipelines. The ideal candidate should have extensive experience in cloud security and DevSecOps practices. This contract position is inside IR35 and offers a hybrid working arrangement.

Key Responsibilities:

• Design and implement secure AWS cloud infrastructure, focusing on critical security aspects such as secure system architecture, Identity and Access Management (IAM), encryption practices, data protection, and network security enhancements.
• Work closely with the QRT Information Security team and application teams to drive security initiatives and ensure alignment with the overall security strategy.
• Enhance and secure CI/CD pipelines for a range of applications, ensuring secure coding practices and integrating security measures into the DevOps processes.
• Develop automation scripts and tools to streamline security processes, improve security metrics, and support operational requirements.
• Keep abreast of the latest security threats, mitigation techniques, and industry trends, applying this knowledge to improve our security posture as it relates to public cloud deployments.

Key Skills:

• Minimum of 3 years of experience in a DevSecOps role, with at least 5 years in cloud security or engineering positions.
• Excellent knowledge of AWS cloud services and security mechanisms associated with them. Familiarity with Azure is a plus.
• Strong understanding of networking, system, and security engineering concepts, especially as they relate to cloud environments.
• Experienced in using Infrastructure as Code (IaC) tools such as Terraform and Ansible for secure infrastructure provisioning and management.
• Excellent analytical and problem-solving skills, coupled with strong verbal and written communication abilities.
• Wiz (cloud security posture monitoring tool) is a nice to have.

Salary (Rate): undetermined

City: London

Country: UK

Working Arrangements: hybrid

IR35 Status: inside IR35

Seniority Level: undetermined

Industry: IT

Detailed Description From Employer:

Cloud Security Engineer - Contract Inside IR35/Hybrid - 2/3 days week Victoria

• Seeking an experienced Cloud Security Engineer, with a strong focus on AWS. The ideal candidate will be responsible for designing, implementing, and maintaining secure cloud infrastructure primarily on AWS, ensuring robust security frameworks, and supporting continuous delivery for our applications.
• Design and implement secure AWS cloud infrastructure, focusing on critical security aspects such as secure system architecture, Identity and Access Management (IAM), encryption practices, data protection, and network security enhancements.
• Work closely with the QRT Information Security team and application teams to drive security initiatives and ensure alignment with the overall security strategy.
• Enhance and secure CI/CD pipelines for a range of applications, ensuring secure coding practices and integrating security measures into the DevOps processes.
• Develop automation scripts and tools to streamline security processes, improve security metrics, and support operational requirements.
• Keep abreast of the latest security threats, mitigation techniques, and industry trends, applying this knowledge to improve our security posture as it relates to public cloud deployments

Your present skill set

• Minimum of 3 years of experience in a DevSecOps role, with at least 5 years in cloud security or engineering positions.
• Excellent knowledge of AWS cloud services and security mechanisms associated with them. Familiarity with Azure is a plus.
• Strong understanding of networking, system, and security engineering concepts, especially as they relate to cloud environments.
• Experienced in using Infrastructure as Code (IaC) tools such as Terraform and Ansible for secure infrastructure provisioning and management.
• Excellent analytical and problem-solving skills, coupled with strong verbal and written communication abilities.
• Wiz (cloud security posture monitoring tool) is a nice to have