Cloud Security Engineer - 6 month - SC Cleared

Cloud Security Engineer - SC Cleared

Up to £475 per day (Inside IR35)

2 days on site per week in Larkhill, Salisbury

6 months Contract

About the Role

We are seeking an experienced Cloud Security Engineer to play a key role in the design, build and security of our clients Microsoft Azure cloud platform.

This is a hands-on engineering position focused on embedding security into the cloud foundation from day one. Working closely with Architecture, Infrastructure, Cyber Security and delivery teams, you will design and implement secure Azure landing zones, governance controls, identity solutions, networking and integration services that enable future workloads to be deployed safely and consistently.

You will be responsible for translating security requirements and architectural principles into practical technical controls, ensuring security is built into the platform rather than applied retrospectively. This role is ideal for someone who enjoys combining cloud engineering expertise with security best practice to deliver secure, scalable and operational Azure environments.

Experience Required

• Significant hands-on experience engineering and securing Microsoft Azure environments.

• Proven experience delivering Azure landing zones and cloud foundation capabilities.

• Strong background in Azure identity, access management and cloud governance.

• Experience implementing security controls across networking, workloads and integration services.

• Practical experience with Infrastructure as Code, automation and cloud deployment pipelines.

• Experience applying Secure by Design principles and cloud security best practices.

• Ability to work closely with architects, engineers and security teams to deliver secure cloud services.

• Strong documentation, stakeholder engagement and technical communication skills.

Required Skillset

Cloud Security & Azure Platform

• Microsoft Azure security engineering

• Azure Landing Zones & Hub-and-Spoke Architecture

• Secure by Design principles

• Cloud governance, security controls and guardrails

Identity & Access Management

• Microsoft Entra ID

• RBAC, PIM, Conditional Access & MFA

• Privileged access and identity security

Network & Infrastructure Security

• Azure Firewall, NSGs and network segmentation

• Secure hybrid connectivity

• Encryption, Key Vault and secrets management

Security Operations & Governance

• Microsoft Defender for Cloud

• Security monitoring, logging and vulnerability remediation

• Azure Policy and compliance controls

Integration & Automation

• Azure API Management (APIM)

• Azure Integration Services (Logic Apps, Functions, Service Bus, Event Grid)

• Infrastructure as Code (Terraform/Bicep)

• Azure DevOps or GitHub Actions

Professional Skills

• Technical documentation

• Stakeholder engagement and communication

• Problem solving and security assurance

Desirable

• Microsoft Azure security or architecture certifications.

• Experience within Defence, Government or highly regulated environments.

• Knowledge of Microsoft Sentinel, CAF/Landing Zones and Azure monitoring solutions.

• Current SC Clearance