Cloud Security Engineer in Nottingham

Experian Global Security office are looking for a Cloud Security Engineer. You will be responsible for designing, implementing, and advancing security controls across multi-cloud environments including AWS, Azure, and GCP. You will focus on building secure architecture, identifying risks, and ensuring adoption of best practices for identity, access, and privileged account management in the cloud. You will sit within our Privileged Access Management team with primary emphasis on cloud security. You will focus on partnering with business Cloud SMEs, shape security roadmaps, and improve adoption of enterprise cloud security standards. This is a remote, UK-based position reporting to the Director of Privileged Access Management.

Important Responsibilities

• Develop security controls for multi-cloud environments (AWS, Azure, GCP) with special focus on PAM capabilities.
• Define secure configurations for cloud-native services (compute, storage, networking, databases, containers, serverless) around human and non-human identities.
• Collaborate with enterprise and business Cloud SMEs to align security requirements with business and technology roadmaps.
• Integrate cloud security with enterprise IAM and PAM solutions, ensuring enforcement of least-privilege access using modern concepts such as JIT and Zero standing privileges.
• Contribute to the design and implementation of cloud IAM policies according to industry best practices across AWS, Azure, and GCP.
• Partner with PAM engineers to extend privileged access controls to cloud-native services (integration with CyberArk or equivalent).
• Support secret management strategies for application-to-application and DevOps use cases.
• Contribute to the cloud security roadmap, ensuring understanding of enterprise goals and regulatory requirements.
• Evaluate new cloud security technologies, making recommendations for adoption.

Experience and Skills

• Experience in cybersecurity specializing in cloud security engineering and architecture.
• Hands-on experience with AWS, Azure, and GCP security controls, including IAM, networking, logging/monitoring, and workload protection.
• Knowledge of cloud security frameworks and best practices (e.g., CIS Benchmarks, NIST CSF, CSA CCM).
• Some understanding of designing and enforcing IAM/PAM controls in cloud environments, i.e. CyberArk knowledge.
• Background working with secret management, DevOps integration, and automation (Terraform, Ansible, Python, and CI/CD pipelines).
• Deep security knowledge covering primary technology infrastructure (network, storage, servers, databases), identity management, and application security practices.
• Cloud security certifications such as AWS Certified Security, Azure Security Engineer Associate, Google Cloud Professional Cloud Security Engineer.
• Broader security certifications such as CISSP, CCSP, CISM, GIAC.

Additional Information

• Great compensation package and discretionary bonus plan.
• Core benefits include pension, Bupa healthcare, sharesave scheme and more.
• 25 days annual leave with 8 bank holidays and 3 volunteering days. You can purchase additional annual leave.

Experian is proud to be an Equal Opportunity employer. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.