Sc Cleared Cloud Security Engineer

SC Cleared Cloud Security Engineer

Location:

UK – Fully Remote

Contract:

Up to 12 months
Clearance:
Active UK SC Clearance required
Rate:
Up to £480/day Outside IR35

We are looking for an experienced SC Cleared Cloud Security Engineer to join a hands-on cloud security engineering team supporting secure cloud infrastructure and delivery pipelines.

This is an engineering-focused role. You will be responsible for implementing security controls directly within cloud infrastructure and CI/CD pipelines rather than providing purely advisory or architectural guidance.

• Active UK SC Clearance in place at mobilisation
• Strong hands-on AWS engineering experience with a clear focus on cloud security and identity
• Strong production experience with Terraform, including reusable module design and state management
• Hands-on Python and Type Script experience
• Strong Git Hub and Git Hub Actions experience, including security tooling within pipelines
• Experience with cloud security controls and secure-by-design principles
  
  Experience implementing security controls as code

• Define and deploy AWS infrastructure using Terraform, embedding security controls such as IAM policies, network segmentation, encryption and logging
• Implement and maintain preventative and detective AWS security guardrails, including Service Control Policies, AWS Config, Security Hub and Guard Duty
• Integrate security testing into Git Hub Actions pipelines, including SAST, dependency scanning, IaC scanning and secrets detection
• Triage and address security findings identified through CI/CD security tooling
• Implement secrets and key management in line with security policies
• Develop Python and Type Script automation and tooling to support vulnerability management and security control evidence collection
• Produce security control evidence suitable for assurance activities such as CAF, Gov Assure or equivalent
• Maintain technical documentation and sprint artefacts using Confluence and Jira

• AWS Security Specialty or AWS Solutions Architect Associate certification
• UK public sector delivery experience
• Container security experience with ECS or EKS
• Exposure to NCSC guidance, Cyber Assessment Framework (CAF) or Cyber Essentials Plus

• Fully remote UK-based contract
• Up to 12 months
• Outside IR35
• Up to £480 per day
• Active SC Clearance required at mobilisation