Summary: The Terraform & Sentinel Engineer role is a contract position focused on enhancing security within a leading financial services organization. The engineer will design and implement Sentinel policies, collaborate with internal teams, and ensure the integration of security into Terraform workflows. This fully remote role requires occasional travel to London or Edinburgh and is essential for improving the CI/CD pipeline's security posture. Candidates must be eligible for vetting and have relevant experience in the financial services sector.

Key Responsibilities:

• Design and implement 20 new Sentinel policies focused on enhancing existing corrective config rules.
• Use the existing Testing Framework to validate policy behaviour.
• Collaborate with the internal team via Agile ceremonies (Stand-ups, Sprint Planning, Retrospectives).
• Demo and document policies for internal teams to ensure transparency and continuity.
• Release policies for internal customers using the established advisory/mandatory tagging process in Terraform workspaces.
• Develop clear developer and customer documentation.
• Deliver live demonstrations to internal teams and stakeholders, facilitating hands-on adoption and feedback sessions.
• Potential involvement in supporting the setup and configuration of AWS Security Lake.

Key Skills:

• Strong expertise in Terraform and HashiCorp Sentinel (must-have).
• Proficient in Python and comfortable working with GitLab.
• Experience working in Agile environments, capable of self-organising within a squad structure.
• Excellent written and verbal communication skills for demoing and documentation.
• Financial services industry experience is essential.
• Exposure to AWS Security Lake or similar cloud-native security tools (nice to have).
• Experience working in highly regulated environments (nice to have).
• Ability to translate complex technical solutions into easy-to-understand demonstrations and documentation (nice to have).

Salary (Rate): 600

City: undetermined

Country: United Kingdom

Working Arrangements: remote

IR35 Status: inside IR35

Seniority Level: undetermined

Industry: IT