> Markdown version of [/jobs/ext/2250074-aws-network-and-security-lead](https://www.wearedevelopers.com/jobs/ext/2250074-aws-network-and-security-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # AWS Network and Security Lead - **Company:** N Consulting Ltd - **Location:** UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Bash Shell, Cloud Computing, Cloud Computing Security, Cyber Security, Computer Networks, Information Technology Consulting, Continuous Integration, Github, Identity and Access Management, IP Address Management, Virtual Private Networks (VPN), Python (Programming Language), Network Security, Network Architecture, Network Segmentation, PCI Data Security Standards, Role-Based Access Control, Zero Trust Network Access, Data Logging, Scripting, System Availability, Delivery Pipeline, Cloudformation, Gitlab-ci, Information Technology, Route53, CIS Benchmarks, Cloudwatch, Terraform, Devsecops, Security Orchestration, Automation & Response, Jenkins, Vulnerability Analysis - **Published:** August 26, 2026 - **Apply:** https://www.collegerecruiter.com/job/2815087857-aws-network-and-security-lead ## About the Role The position requires deep hands-on expertise in AWS networking and security services, strong stakeholder and team leadership, and the ability to drive cloud-security best practices across the organisation., Technical Expertise * 7+ years of hands-on AWS networking/security experience. * Deep knowledge of IAM, KMS, Secrets Manager, Certificate Manager. * Monitoring and logging with CloudWatch, CloudTrail, Lambda, OpenSearch. * Strong understanding of Zero Trust, least privilege, defence-in-depth, and cloud-native security models., * IaC: Terraform, CloudFormation, CDK. * Security: GuardDuty, Security Hub, Shield, WAF. * Scripting: Python, Bash. * CI/CD: Jenkins, GitLab CI, GitHub Actions, AWS CodePipeline. ## Description AWS Network and Security Lead is responsible for designing, implementing, and managing secure, scalable, and highly available cloud network infrastructures on Amazon Web Services (AWS). This role leads the strategy, governance, and execution of cloud networking and security architecture, ensuring the protection, compliance, and performance of enterprise workloads. The position requires deep hands-on expertise in AWS networking and security services, strong stakeholder and team leadership, and the ability to drive cloud-security best practices across the organisation. Key Responsibilities Network Architecture & Engineering * Design, implement, and optimize complex AWS network architectures using VPCs, Transit Gateways, Direct Connect, VPN, Elastic Load Balancing, Route 53, and PrivateLink. * Define and manage network segmentation strategies, routing policies, and hybrid connectivity models. * Ensure high availability, performance, and resiliency across multi-region and multi-account AWS network environments. * Oversee IP address management (IPAM) and global traffic management. Security Architecture & Operations * Lead the design, implementation, and enforcement of AWS security controls and guardrails. * Implement and manage AWS WAF, Shield, Security Groups, NACLs, KMS, IAM, SCPs, Organizations, Config, GuardDuty, Inspector, and Security Hub. * Develop and maintain security baselines, network policies, and compliance frameworks (ISO 27001, CIS, NIST, PCI-DSS). * Perform threat modelling, vulnerability assessments, and risk analysis. * Lead incident response processes for cloud security events. Cloud Governance & Best Practices * Define governance models for multi-account AWS environments using Landing Zones/Control Tower. * Establish and enforce tagging standards, monitoring standards, and network/security automation. * Develop and maintain runbooks, playbooks, HLD/LLD documents. Automation & DevSecOps * Implement infrastructure as code (Terraform, CloudFormation, CDK) for network and security provisioning. * Integrate security tooling into CI/CD pipelines. * Automate compliance and drift detection using AWS native tools and scripting (Python/Bash). Key Skills & Experience Technical Expertise * 7+ years of hands-on AWS networking/security experience. * Deep knowledge of IAM, KMS, Secrets Manager, Certificate Manager. * Monitoring and logging with CloudWatch, CloudTrail, Lambda, OpenSearch. * Strong understanding of Zero Trust, least privilege, defence-in-depth, and cloud-native security models. Tools & Technologies * IaC: Terraform, CloudFormation, CDK. * Security: GuardDuty, Security Hub, Shield, WAF. * Scripting: Python, Bash. * CI/CD: Jenkins, GitLab CI, GitHub Actions, AWS CodePipeline. Seniority level Mid-Senior level Employment type Contract Job function Information Technology Industries IT Services and IT Consulting ## Related Videos - [30 powerful AWS hacks in just 30 minutes: Boost your developer productivity](https://www.wearedevelopers.com/videos/1624-30-powerful-aws-hacks-in-just-30-minutes-boost-your-developer-productivity) - [The Road to MLOps: How Verivox Transitioned to AWS](https://www.wearedevelopers.com/videos/1050-the-road-to-mlops-how-verivox-transitioned-to-aws) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Enterprise-Cloud-Native - Fast-Paced Development & Deployment in a Highly Secure Banking Environment](https://www.wearedevelopers.com/videos/671-enterprise-cloud-native-fast-paced-development-deployment-in-a-highly-secure-banking-environment) - [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)