Job Title: Senior Cloud Security / DevSecOps ArchitectJob Location: London (Onsite)Job Type: FTERole OverviewWe are looking for an experienced Senior Cloud Security / DevSecOps Engineer with 10+ years of IT experience and strong expertise in multi-cloud infrastructure, Infrastructure as Code (IaC), CI/CD automation, cloud security and policy-as-code.The ideal candidate will have hands-on experience across AWS, Azure and GCP, with strong knowledge of Terraform, GitLab CI/CD, Azure DevOps, Python and Rego/OPA. The role will work closely with Cyber Security, Cloud Engineering and application teams to implement security controls, investigate policy-related issues and enable development teams to securely adopt cloud security and automation solutions.Key Responsibilities? Design, deploy and manage cloud resources across AWS, Azure and GCP.? Develop and maintain reusable Terraform modules for cloud resource deployment.? Implement Infrastructure as Code standards and support application teams with Terraform-related implementation and troubleshooting.? Promote reusable, scalable and secure infrastructure deployment patterns.CI/CD & DevSecOps? Build, maintain and support CI/CD pipelines using GitLab CI/CD and Azure DevOps.? Integrate infrastructure and security validations into application deployment pipelines.? Troubleshoot pipeline failures and security-policy validation issues.? Support development teams in adopting automated security controls within their existing CI/CD workflows.Automation & Policy as Code? Develop automation solutions using Python to improve operational efficiency and reduce repetitive manual activities.? Develop and maintain Rego/OPA policies for automated cloud and Infrastructure as Code security validation.? Investigate policy failures, false positives and configuration issues.? Work with application teams to understand policy violations and provide appropriate remediation guidance.? Strong understanding of cloud security controls across AWS, Azure and GCP.? Implement and support Azure Policies for governance and security enforcement.? Work with AWS Service Control Policies (SCPs) and Resource Control Policies (RCPs).? Understand and troubleshoot cloud IAM roles, permissions and access controls.? Support secure deployment patterns and cloud governance requirements across multiple cloud environments.CNAPP / CSPM? Strong understanding of Cloud-Native Application Protection Platform (CNAPP) and Cloud Security Posture Management (CSPM) concepts.? Hands-on or operational knowledge of Wiz and CloudGuard.? Investigate cloud security findings, policy violations and configuration issues identified through CNAPP/CSPM platforms.? Work with application and Cyber Security teams to understand findings and support remediation.? Assist application teams with onboarding and adoption of cloud security solutions.Stakeholder Collaboration & Application Support? Collaborate closely with Cyber Security, Cloud Engineering, DevOps and application development teams.? Provide technical guidance to application teams during solution adoption and onboarding.? Investigate and troubleshoot security policy, Terraform, CI/CD and cloud configuration issues.? Translate security requirements into practical technical solutions that development teams can implement.? Provide clear guidance and documentation for security controls, integration patterns and remediation activities.? Act as a technical point of contact for application teams throughout the adoption lifecycle.Required Technical Skills? Infrastructure as Code: Terraform? Automation: Python? Policy as Code: Rego / Open Policy Agent (OPA)? Cloud Security: Azure Policy, AWS SCP, AWS RCP, IAM roles and permissions? CNAPP / CSPM: Wiz, CloudGuard? DevSecOps: Integration of security and policy controls into CI/CD workflows? Troubleshooting: Cloud policy, IaC, pipeline and security control issuesSoft Skills? Strong communication and stakeholder-management skills.? Ability to work effectively with both Cyber Security and application development teams.? Strong problem-solving and troubleshooting capabilities.? Ability to explain complex security requirements in simple, practical terms.? Collaborative approach when working with developers, engineers and security stakeholders.? Ability to guide application teams through onboarding and solution adoption.? Strong documentation and knowledge-sharing skills.
#J-18808-Ljbffr
Senior Cloud Security / DevSecOps Architect in London employer: Falcon Smart IT (FalconSmartIT)
As a leading player in the banking and payments sector, our company offers an exceptional work environment in London, where innovation meets collaboration. We prioritise employee growth through mentorship and cutting-edge projects, ensuring that our team is at the forefront of technology advancements. With a strong focus on work-life balance and a culture that embraces diversity and inclusion, we provide a rewarding experience for those looking to make a significant impact in the financial services industry.
Contact Details:
Falcon Smart IT (FalconSmartIT) Recruitment Team
