Job Title: Senior Cloud Security / DevSecOps Architect
Job Location: London (Onsite)
Job Type: FTE
Role Overview
We are looking for an experienced Senior Cloud Security / DevSecOps Engineer with 10+ years of IT experience and strong expertise in multi-cloud infrastructure, Infrastructure as Code (IaC), CI/CD automation, cloud security and policy-as-code.
The ideal candidate will have hands-on experience across AWS, Azure and GCP, with strong knowledge of Terraform, GitLab CI/CD, Azure DevOps, Python and Rego/OPA. The role will work closely with Cyber Security, Cloud Engineering and application teams to implement security controls, investigate policy-related issues and enable development teams to securely adopt cloud security and automation solutions.
Key Responsibilities
? Design, deploy and manage cloud resources across AWS, Azure and GCP.
? Develop and maintain reusable Terraform modules for cloud resource deployment.
? Implement Infrastructure as Code standards and support application teams with Terraform-related implementation and troubleshooting.
? Promote reusable, scalable and secure infrastructure deployment patterns.
CI/CD & DevSecOps
? Build, maintain and support CI/CD pipelines using GitLab CI/CD and Azure DevOps.
? Integrate infrastructure and security validations into application deployment pipelines.
? Troubleshoot pipeline failures and security-policy validation issues.
? Support development teams in adopting automated security controls within their existing CI/CD workflows.
Automation & Policy as Code
? Develop automation solutions using Python to improve operational efficiency and reduce repetitive manual activities.
? Develop and maintain Rego/OPA policies for automated cloud and Infrastructure as Code security validation.
? Investigate policy failures, false positives and configuration issues.
? Work with application teams to understand policy violations and provide appropriate remediation guidance.
? Strong understanding of cloud security controls across AWS, Azure and GCP.
? Implement and support Azure Policies for governance and security enforcement.
? Work with AWS Service Control Policies (SCPs) and Resource Control Policies (RCPs).
? Understand and troubleshoot cloud IAM roles, permissions and access controls.
? Support secure deployment patterns and cloud governance requirements across multiple cloud environments.
CNAPP / CSPM
? Strong understanding of Cloud-Native Application Protection Platform (CNAPP) and Cloud Security Posture Management (CSPM) concepts.
? Hands-on or operational knowledge of Wiz and CloudGuard.
? Investigate cloud security findings, policy violations and configuration issues identified through CNAPP/CSPM platforms.
? Work with application and Cyber Security teams to understand findings and support remediation.
? Assist application teams with onboarding and adoption of cloud security solutions.
Stakeholder Collaboration & Application Support
? Collaborate closely with Cyber Security, Cloud Engineering, DevOps and application development teams.
? Provide technical guidance to application teams during solution adoption and onboarding.
? Investigate and troubleshoot security policy, Terraform, CI/CD and cloud configuration issues.
? Translate security requirements into practical technical solutions that development teams can implement.
? Provide clear guidance and documentation for security controls, integration patterns and remediation activities.
? Act as a technical point of contact for application teams throughout the adoption lifecycle.
Required Technical Skills
? Infrastructure as Code: Terraform
? Automation: Python
? Policy as Code: Rego / Open Policy Agent (OPA)
? Cloud Security: Azure Policy, AWS SCP, AWS RCP, IAM roles and permissions
? CNAPP / CSPM: Wiz, CloudGuard
? DevSecOps: Integration of security and policy controls into CI/CD workflows
? Troubleshooting: Cloud policy, IaC, pipeline and security control issues
Soft Skills
? Strong communication and stakeholder-management skills.
? Ability to work effectively with both Cyber Security and application development teams.
? Strong problem-solving and troubleshooting capabilities.
? Ability to explain complex security requirements in simple, practical terms.
? Collaborative approach when working with developers, engineers and security stakeholders.
? Ability to guide application teams through onboarding and solution adoption.
? Strong documentation and knowledge-sharing skills.
#J-18808-Ljbffr
Senior Cloud Security / DevSecOps Architect employer: Falcon Smart IT (FalconSmartIT)
As a leading player in the banking and payments sector, our company offers an exceptional work environment in London, where innovation meets collaboration. We prioritise employee growth through mentorship and cutting-edge projects, ensuring that our team is at the forefront of technology advancements. With a strong focus on work-life balance and a culture that embraces diversity and inclusion, we provide a rewarding experience for those looking to make a significant impact in the financial services industry.
Contact Details:
Falcon Smart IT (FalconSmartIT) Recruitment Team
