Key Responsibilities
- Design and deliver end-to-end cloud security architectures across AWS (primary) and Azure environments, defining security patterns, guardrails, and controls aligned to enterprise security standards and regulatory requirements
- Conduct threat modelling and security risk assessments across cloud workloads, translating findings into actionable remediation roadmaps and architectural recommendations
- Define and enforce security controls across cloud-native services including identity and access management, network segmentation, encryption, logging, and monitoring
- Align cloud security architecture to relevant compliance and regulatory frameworks including NIST CSF, ISO 27001, CIS Benchmarks, and government security standards - supporting audit readiness and evidence gathering
- Engage and advise senior stakeholders including CISO-level audiences, producing clear security architecture documentation, risk reports, and governance artefacts throughout the delivery life cycle
What You Will Ideally Bring
- Proven hands-on experience designing and implementing security architectures across AWS cloud environments, with supporting knowledge of Azure security services and controls
- Strong understanding of cloud security domains including IAM, network security, encryption, secrets management, logging, monitoring, and incident response in cloud-native and hybrid environments
- Experience applying compliance and security frameworks including NIST CSF, ISO 27001, CIS Benchmarks, and government security standards such as NCSC Cloud Security Principles
- Threat modelling experience using methodologies such as STRIDE or MITRE ATT&CK, with the ability to translate technical risks into business-relevant language for senior stakeholders
- Strong documentation and stakeholder engagement skills, with the ability to produce security architecture artefacts, risk assessments, and governance reporting - Active SC clearance required
Contract Details:
- Duration: 6 months
- Rate: £500/day - Inside IR35
- Location: Fully Remote
- Start Date: ASAP