Senior Cloud Security / DevSecOps Architect

Job Title: Senior Cloud Security / DevSecOps Architect

Job Location: London (Onsite)

Job Type: FTE

Role Overview

We are looking for an experienced Senior Cloud Security / DevSecOps Engineer with 10+ years of IT experience and strong expertise in multi-cloud infrastructure, Infrastructure as Code (IaC), CI/CD automation, cloud security and policy-as-code.

The ideal candidate will have hands-on experience across AWS, Azure and GCP, with strong knowledge of Terraform, GitLab CI/CD, Azure DevOps, Python and Rego/OPA. The role will work closely with Cyber Security, Cloud Engineering and application teams to implement security controls, investigate policy-related issues and enable development teams to securely adopt cloud security and automation solutions.

Key Responsibilities

Cloud Infrastructure & Terraform

Design, deploy and manage cloud resources across AWS, Azure and GCP.

Develop and maintain reusable Terraform modules for cloud resource deployment.

Implement Infrastructure as Code standards and support application teams with Terraform-related implementation and troubleshooting.

Promote reusable, scalable and secure infrastructure deployment patterns.

CI/CD & DevSecOps

Build, maintain and support CI/CD pipelines using GitLab CI/CD and Azure DevOps.

Integrate infrastructure and security validations into application deployment pipelines.

Troubleshoot pipeline failures and security-policy validation issues.

Support development teams in adopting automated security controls within their existing CI/CD workflows.

Automation & Policy as Code

Develop automation solutions using Python to improve operational efficiency and reduce repetitive manual activities.

Develop and maintain Rego/OPA policies for automated cloud and Infrastructure as Code security validation.

Investigate policy failures, false positives and configuration issues.

Work with application teams to understand policy violations and provide appropriate remediation guidance.

Cloud Security

Strong understanding of cloud security controls across AWS, Azure and GCP.

Implement and support Azure Policies for governance and security enforcement.

Work with AWS Service Control Policies (SCPs) and Resource Control Policies (RCPs).

Understand and troubleshoot cloud IAM roles, permissions and access controls.

Support secure deployment patterns and cloud governance requirements across multiple cloud environments.

CNAPP / CSPM

Strong understanding of Cloud-Native Application Protection Platform (CNAPP) and Cloud Security Posture Management (CSPM) concepts.

Hands-on or operational knowledge of Wiz and CloudGuard.

Investigate cloud security findings, policy violations and configuration issues identified through CNAPP/CSPM platforms.

Work with application and Cyber Security teams to understand findings and support remediation.

Assist application teams with onboarding and adoption of cloud security solutions.

Stakeholder Collaboration & Application Support

Collaborate closely with Cyber Security, Cloud Engineering, DevOps and application development teams.

Provide technical guidance to application teams during solution adoption and onboarding.

Investigate and troubleshoot security policy, Terraform, CI/CD and cloud configuration issues.

Translate security requirements into practical technical solutions that development teams can implement.

Provide clear guidance and documentation for security controls, integration patterns and remediation activities.

Act as a technical point of contact for application teams throughout the adoption lifecycle.

Required Technical Skills

Cloud: AWS, Microsoft Azure, GCP

Infrastructure as Code: Terraform

Terraform: Resource deployment, reusable module development and troubleshooting

CI/CD: GitLab CI/CD, Azure DevOps

Automation: Python

Policy as Code: Rego / Open Policy Agent (OPA)

Cloud Security: Azure Policy, AWS SCP, AWS RCP, IAM roles and permissions

CNAPP / CSPM: Wiz, CloudGuard

DevSecOps: Integration of security and policy controls into CI/CD workflows

Troubleshooting: Cloud policy, IaC, pipeline and security control issues

Soft Skills

Strong communication and stakeholder-management skills.

Ability to work effectively with both Cyber Security and application development teams.

Strong problem-solving and troubleshooting capabilities.

Ability to explain complex security requirements in simple, practical terms.

Collaborative approach when working with developers, engineers and security stakeholders.

Ability to guide application teams through onboarding and solution adoption.

Strong documentation and knowledge-sharing skills.