Platform Engineer

Overview

Supporting a well-known UK digital consumer brand on a critical engagement to evidence compliance with the CAF 4 framework.

The role combines hands-on cloud security remediation with compliance documentation and stakeholder reporting, primarily across AWS with some GCP involvement.

Key Responsibilities

• Assess current security controls and identify remediation needed to meet CAF 4 compliance objectives
• Implement changes across AWS infrastructure (and GCP where needed) - covering IAM, MFA, network segmentation, TLS/encryption, centralised logging, and backup/recovery
• Produce clear, audit-ready documentation and evidence to support compliance outcomes
• Work with internal teams and third-party suppliers to validate shared security responsibilities
• Provide weekly progress updates to senior stakeholders, including risks, blockers, and delivery status

Focus areas

• Supply chain risk & third-party threat management
• Access control & data protection (MFA, IAM, network segregation, TLS)
• Centralised logging & alerting (CloudTrail, VPC Flow Logs, GuardDuty, SIEM)
• Incident recovery & evidence handling (backups, chain of custody)

Key experience

• Strong hands-on experience securing AWS environments; working knowledge of GCP beneficial
• Experience delivering against cyber security and compliance frameworks (CAF, NIS, ISO 27001, or similar)
• Solid understanding of IAM, MFA, logging, monitoring, backup, and network segmentation
• Experience producing technical and compliance documentation for senior stakeholders
• Comfortable operating in a fast-paced delivery environment with immediate impact
• Strong stakeholder communication skills