SC Cleared Cloud Security Engineer – AWS / Terraform

SC Cleared Cloud Security Engineer – AWS / Terraform UK Remote | Outside IR35 | Up to £480 per day | Up to 12 Months

We’re looking for an experienced Cloud Security Engineer to join a major cloud delivery programme on an initial long-term contract.

This is a hands-on engineering role, focused on embedding security controls directly into AWS cloud infrastructure and CI/CD delivery pipelines.

Please note: You must already hold active SC clearance and be UK-based.

What You’ll Be Doing

• Build and deploy secure AWS infrastructure using Terraform
• Implement security controls as code across IAM, network segmentation, encryption and logging
• Configure and maintain AWS security guardrails including Service Control Policies (SCPs), AWS Config, Security Hub and GuardDuty
• Integrate security testing into GitHub Actions pipelines, including SAST, dependency scanning, IaC scanning and secrets detection
• Triage security findings and support vulnerability management
• Implement secrets and key management in line with security policies
• Develop security automation and tooling using Python and TypeScript
• Produce control evidence suitable for security assurance activities
• Maintain sprint artefacts in Jira and technical documentation in Confluence

Essential Experience

• You should have strong, demonstrable experience across:
• Hands-on AWS engineering, particularly AWS security services and identity
• Terraform in production environments, including module design and state management
• Python and TypeScript
• GitHub and GitHub Actions, including pipeline security tooling
• Cloud security controls, frameworks and secure-by-design principles
• Active SC clearance available at mobilisation

Desirable Experience

• Experience in any of the following would be advantageous:
• AWS Security Specialty or AWS Solutions Architect Associate certification
• UK public sector delivery
• Container security across ECS / EKS
• NCSC guidance
• Cyber Assessment Framework (CAF)
• Cyber Essentials Plus

Contract Details

• Rate: Up to £480 per day
• IR35: Outside IR35
• Location: Fully remote – UK based
• Duration: Up to 12 months
• Start: September 2026
• Clearance: Active SC clearance required

If you’re an SC-cleared Cloud Security Engineer with strong AWS, Terraform and DevSecOps experience and are available for a long-term remote contract, please apply with your latest CV.