Cloud Security Engineer

Cloud Security Engineer

Location: Remote – UK, Netherlands, Poland, Ireland, Denmark or Romania

Day Rate: Up to £550 PER/DAY

Contract Duration: 12 months

Position Overview

We are seeking an experienced Cloud Security Engineer to drive the technical delivery of encryption and security improvements across cloud and on-premises infrastructure.

This is a hands-on engineering role for someone who can combine strong cloud security expertise with infrastructure-as-code, automation and software engineering skills. You will lead the technical approach to addressing encryption gaps, while working closely with platform engineering teams to design, implement and deploy secure, scalable solutions.

Key Responsibilities

• Lead the technical strategy for identifying and remediating encryption gaps across cloud and on-premises environments.
• Design and implement encryption-at-rest and encryption-in-transit controls across infrastructure, services and applications.
• Drive key management and key rotation initiatives, including solutions based on AWS KMS and associated tooling.
• Design, review and implement infrastructure and application code changes required to enhance encryption and security controls.
• Develop, test and deploy encryption-related infrastructure changes using Terraform and Ansible.
• Strengthen logging, monitoring and security controls across cloud-native, Kubernetes and containerised environments.
• Support deployment, automation and continuous improvement across the organisation's engineering platforms.
• Collaborate with security, infrastructure and application engineering teams to ensure solutions meet security, operational and compliance requirements.

Skills & Experience

• 8–10+ years' experience in cloud infrastructure and security engineering, with strong hands-on coding capability.
• Proven experience designing and architecting secure cloud infrastructure, rather than focusing solely on operational engineering.
• Strong hands-on experience with AWS and/or GCP; exposure to Azure is advantageous.
• Deep knowledge of encryption technologies, PKI and key management, particularly AWS KMS.
• Strong Kubernetes and Linux administration and troubleshooting skills.
• Hands-on experience with Terraform and Ansible for infrastructure automation.
• Strong Python development skills and experience working within CI/CD environments.
• Solid understanding of cloud and infrastructure security best practices.
• Experience working within formal security, governance and change-management processes.
• Ability to operate at both an architectural level and a hands-on implementation level.

Desirable Experience

• Experience with certificate lifecycle management platforms such as AppViewX, Keyfactor or Venafi.
• Previous experience in banking, financial services or another highly regulated industry.
• Experience leading, mentoring or technically guiding platform/infrastructure engineers.
• Experience working in a fast-paced, high-growth or startup-style engineering environment.