- Assist with scoping, design and build of secure Azure cloud services to support the Modernisation programme and deliver a scalable and flexible cloud security capability to support and facilitate innovation for our clients new ecosystem.
- Work with the Design & Delivery Lead to help define and deliver the high-level and low-level security objectives and designs for a project or programme, aligning to business and functional requirements.
- Work with teams to implement secure systems and solutions through the application of regulations, policies, standards and procedures to meet user needs while managing business and security risks.
- Develop, test, and deliver Security Policy as code for a variety of Public Cloud compute services and Container platforms leveraging native services.
- Understand industry standard controls such as CIS/NIST/GDPR/ISO/CSA CCM/MCSB to deliver compliant solutions through appropriate adoption, configuration and management of key controls.
- Deliver security work stream activities and tasks against the migration strategy and integration points for central security services to manage/monitor the cloud infrastructure.
- Drive discussions and design decisions to deliver scalable and manageable cloud solutions aligned to security, performance, operational and cost constraints.
- Proven experience in Cloud Infrastructure Engineering/Platform Engineer/Security Engineer role, migrating and integrating cloud foundation services (preferably on MS Azure public cloud) is essential.
- Proven experience with implementing secure core foundational services in a cloud infrastructure for AD, SecDevOps, Networking Services, at an enterprise level is essential.
- Proven experience in SIEM & SOAR (security information and event management (SIEM) and security orchestration, automation, and response (SOAR). Experience with Rapid7 SIEM tooling is desirable.
- Proven experience with the core foundational security services of cloud providers (preferably Azure or AWS equivalent for AD, Defender for Cloud, Azure Sentinel, AppGateway and APIM, Azure Identity Protection, PIM) is essential.
- Proven experience with Provisioning Security policy as Code (IAC) tools such as Terraform, CloudFormation and adopting secure code practices and guidelines is essential.
- Advanced understanding and use of scripting languages such as Python, Groovy, Go is essential.
- Microsoft Azure Security Engineer Associate certification or AWS equivalent.
- Visa sponsorship / £90 to100k / Up to 25% Bonus / Work from home options / Flexible working / 30 Days Holiday / Medical Cover / Life Cover / Pension (up to 8% employer contribution)