Cloud Security Engineer - Encryption Infrastructure Lead

The Encryption Infrastructure Lead will work Embedded within Recorded Future’s team to support closure of encryption gaps across cloud and service infrastructure, including encryption at rest, encryption in transit, key management and related infrastructure security enhancements.

This is a technical lead role for an individual contributor: the successful candidate will help set technical direction and architecture while remaining hands-on, writing code and delivering alongside the wider platform engineering team. The role operates within a fast-paced, security-critical environment supporting a broader enterprise security programme.

Tasks:

• Lead the technical approach for closing encryption gaps across cloud and on-premises infrastructure.
• Implement encryption at rest and encryption in transit controls across services and applications.
• Support key management and key rotation initiatives, including AWS KMS and related tooling.
• Design and review infrastructure and application code changes required to support encryption enhancements.
• Develop and test encryption-related infrastructure changes using Terraform and Ansible.
• Support logging, monitoring and security controls across cloud-native and containerized environments.
• Guide and support IC3 platform engineers on technical approach, code quality and delivery.
• Support deployment and automation efforts across Recorded Future’s platforms.

• 8-10+ years of experience in cloud infrastructure and security engineering, with hands-on coding ability.
• Proven experience designing or architecting secure cloud infrastructure, not purely operational engineering.
• Strong experience with AWS and/or GCP; some Azure exposure is a plus.
• Deep understanding of encryption technologies, PKI and key management (AWS KMS).
• Strong Kubernetes and Linux administration skills.
• Hands-on experience with Terraform and Ansible for infrastructure automation.
• Strong Python skills; comfortable working across CI/CD environments.
• Solid grounding in security best practices and working within formal change/security processes.

Preferred Skills:

• Experience with AppViewX, Keyfactor or Venafi certificate life cycle management platforms.
• Experience working within banking, financial services or another regulated industry.
• Experience leading or mentoring platform engineers in a delivery environment.
• Experience operating within a fast-paced, startup-style engineering culture.

Networking People (UK) is acting as an Employment Business in relation to this vacancy.