Location: UK – Fully Remote
Contract: Up to 12 months
Clearance: Active UK SC Clearance required
Rate: Up to £480/day Outside IR35
We are looking for an experienced SC Cleared Cloud Security Engineer to join a hands-on cloud security engineering team supporting secure cloud infrastructure and delivery pipelines.
This is an engineering-focused role. You will be responsible for implementing security controls directly within cloud infrastructure and CI/CD pipelines rather than providing purely advisory or architectural guidance.
Essential Requirements
Active UK SC Clearance in place at mobilisation
Strong hands-on AWS engineering experience with a clear focus on cloud security and identity
Strong production experience with Terraform, including reusable module design and state management
Hands-on Python and TypeScript experience
Strong GitHub and GitHub Actions experience, including security tooling within pipelines
Experience with cloud security controls and secure-by-design principlesExperience implementing security controls as code
Key Responsibilities
Define and deploy AWS infrastructure using Terraform, embedding security controls such as IAM policies, network segmentation, encryption and logging
Implement and maintain preventative and detective AWS security guardrails, including Service Control Policies, AWS Config, Security Hub and GuardDuty
Integrate security testing into GitHub Actions pipelines, including SAST, dependency scanning, IaC scanning and secrets detection
Triage and address security findings identified through CI/CD security tooling
Implement secrets and key management in line with security policies
Develop Python and TypeScript automation and tooling to support vulnerability management and security control evidence collection
Produce security control evidence suitable for assurance activities such as CAF, GovAssure or equivalent
Maintain technical documentation and sprint artefacts using Confluence and Jira
Desirable Experience
AWS Security Specialty or AWS Solutions Architect Associate certification
UK public sector delivery experience
Container security experience with ECS or EKS
Exposure to NCSC guidance, Cyber Assessment Framework (CAF) or Cyber Essentials Plus
We use essential cookies to make this site work. With your permission we would also like to use the optional cookies below. Nothing optional is set until you choose, and you can change your mind at any time from "Cookie settings" at the bottom of every page. Cookie policy.
Essential — keep the site working and secure, and remember the choice you make here. Always on.