SC Cleared Cloud Security Engineer

We are looking for an experienced SC Cleared Cloud Security Engineer to join a hands-on cloud security engineering team supporting secure cloud infrastructure and delivery pipelines.

This is an engineering-focused role. You will be responsible for implementing security controls directly within cloud infrastructure and CI/CD pipelines rather than providing purely advisory or architectural guidance., * Define and deploy AWS infrastructure using Terraform, embedding security controls such as IAM policies, network segmentation, encryption and logging

• Implement and maintain preventative and detective AWS security guardrails, including Service Control Policies, AWS Config, Security Hub and GuardDuty
• Integrate security testing into GitHub Actions pipelines, including SAST, dependency scanning, IaC scanning and secrets detection
• Triage and address security findings identified through CI/CD security tooling
• Implement secrets and key management in line with security policies
• Develop Python and TypeScript automation and tooling to support vulnerability management and security control evidence collection
• Produce security control evidence suitable for assurance activities such as CAF, GovAssure or equivalent
• Maintain technical documentation and sprint artefacts using Confluence and Jira

• Active UK SC Clearance in place at mobilisation
• Strong hands-on AWS engineering experience with a clear focus on cloud security and identity
• Strong production experience with Terraform, including reusable module design and state management
• Hands-on Python and TypeScript experience
• Strong GitHub and GitHub Actions experience, including security tooling within pipelines
• Experience with cloud security controls and secure-by-design principles
• Experience implementing security controls as code, * AWS Security Specialty or AWS Solutions Architect Associate certification
• UK public sector delivery experience
• Container security experience with ECS or EKS
• Exposure to NCSC guidance, Cyber Assessment Framework (CAF) or Cyber Essentials Plus

• Up to 12 months
• Outside IR35
• Up to £480 per day
• Active SC Clearance required at mobilisation