Cloud Security Engineer

Role: Cloud Security Engineer-Wiz

• This role provides hands‑on cloud security engineering to support data centre to AWS migration programmes, ensuring workloads move safely into the Landing Zone/Control Tower model with the right guardrails, controls, and operational readiness.
• The Cloud Security (Wiz Admin) is responsible for administering, operating, and optimising Aviva’s Wiz Cloud Security Posture Management (CSPM/CNAPP) platform.
• The administrator will drive operational excellence, support engineering teams, integrate Wiz into enterprise tooling, and maintain policy compliance and posture improvement. Own day‑to‑day administration of the Wiz platform across all cloud environments.
• Maintain Wiz connectors, least‑privilege roles, work with Dev Ops/SRE teams to embed Wiz into CI/CD pipelines for IaC scanning.
• Work closely with Cloud Security Architect and assist in defining and implementing security building blocks and controls to ensure migration designs meet required security outcomes.
• Strong experience expected in AWS security fundamentals and landing zone controls.
• Implement core cloud security controls (secure connectivity, IAM, data protection, and logging/monitoring).
• Collaborate across delivery teams to remove blockers and keep migration delivery on track.

• Mandatory
  
  Skills:
  
  Cloud Security Posture Management.
• Strong experience in cloud security, specifically AWS security fundamentals and landing zone controls.