> Markdown version of [/jobs/ext/332480-aws-security-consultant](https://www.wearedevelopers.com/jobs/ext/332480-aws-security-consultant). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# AWS Security Consultant

- **Company:** Cheltenham
- **Location:** Cheltenham, UK
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, User Authentication, Cyber Security, Databases, Digital Signature, Identity and Access Management, Intrusion Detection and Prevention, Key Management, Network Security, Network Segmentation, Public Key Infrastructure, SSL Certificate Management, Data Logging, Spring Cloud, Software Security, Api Management
- **Published:** June 6, 2026
- **Apply:** https://www.apply4u.co.uk/jobs/x/38357686/

## About the Role

Essential Requirements· Active security clearance (or eligibility to obtain and maintain clearance) with experience delivering security architecture within government, public sector, or similarly regulated environments.· Strong hands-on AWS security architecture experience, including deep knowledge of AWS encryption mechanisms, AWS KMS, customer-managed keys, key rotation, envelope encryption, and cryptographic best practices.· Demonstrable expertise in database and application-level encryption, including field-level encryption, client-side encryption, server-side encryption, and a clear understanding of the differences, use cases, and security implications of each approach.· Strong understanding of asymmetric and symmetric cryptography, including public/private key infrastructure (PKI), certificate management, digital signatures, and secure key exchange principles.· Proven ability to design security controls for internet-facing systems, including identity and access management, network
segmentation, API security, secrets management, monitoring, logging, and threat detection within AWS environments.
Candidates will be expected to demonstrate detailed technical knowledge of AWS encryption patterns, including Client-Side Field Level Encryption (CSFLE), Server-Side Encryption (SSE), envelope encryption, AWS KMS integration, and the practical implementation of cryptographic controls within cloud-native applications.

## Description

Role - AWS security consultantKey Responsibilities· Lead the design and implementation of secure AWS architectures for large-scale, internet-facing systems, ensuring security controls are embedded throughout the solution lifecycle.· Define and implement encryption strategies across AWS services, including database field-level encryption, client-side encryption, server-side encryption, key management, and cryptographic controls for sensitive data.· Provide technical leadership on AWS security services including AWS KMS, CloudHSM, IAM, Secrets Manager, GuardDuty, Security Hub, WAF, Shield, and CloudTrail.· Develop security architecture patterns and standards covering authentication, authorisation, network security, data protection, secure API design, and public/private key cryptography.· Work closely with engineering, platform, and delivery teams to review designs, perform threat modelling, and ensure security requirements are implemented in line with public sector and government security


## Related Videos

- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases)
- [Serverless Architectures with Spring Cloud Functions and Knative](https://www.wearedevelopers.com/videos/814-serverless-architectures-with-spring-cloud-functions-and-knative)
- [30 powerful AWS hacks in just 30 minutes: Boost your developer productivity](https://www.wearedevelopers.com/videos/1624-30-powerful-aws-hacks-in-just-30-minutes-boost-your-developer-productivity)
- [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)

## Related Articles

- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)