Aws Security & Cloud Platform Consultant

Infinity Quest Uk; Greater London; On-site; GBP 89,000 - 133,000; Full time

Job summary

Infinity Quest UK is seeking an experienced AWS Security & Cloud Platform Consultant to lead a large-scale defensive AI and bot mitigation PoV for a high-volume enterprise platform. You will design, build and deploy cloud-native security controls, observability solutions, traffic analytics, automation frameworks, and AI-assisted operational capabilities using AWS services and IaC.

The role requires deep expertise in AWS networking, CloudFront, WAF, security automation, observability, large-scale

Qualifications

• Extensive AWS security and network design experience.
• Proven ability to deploy secure, scalable cloud-native platforms.

Responsibilities

• Design and implement AWS WAF and CloudFront protections.
• Develop IaC templates and automation scripts.
• Build observability dashboards and analytics pipelines.
• Profile traffic, detect anomalies and mitigate threats.
• Collaborate with security, platform, and SRE teams.

Skills

AWS WAF

CloudFront

AWS Shield Advanced

Athena

S3

CloudWatch

Kinesis Firehose

Lambda

API Security

Cost Optimisation

Tools

AWS CDK

CloudFormation

Terraform

CI/CD Pipelines

Git-based development workflows

Infrastructure Automation

Job description

Location: London

Duration: 3 months

Start date: ASAP, Project is starting 24th Aug

Rate: around 600 GBP per day

Role Summary

We are seeking an experienced AWS Security & Cloud Platform Consultant to lead the technical execution of a large-scale Defensive AI and Bot Mitigation Proof of Value for a high-volume enterprise digital platform. The consultant will design, build, and deploy cloud-native security controls, observability solutions, traffic analytics, automation frameworks, and AI-assisted operational capabilities using AWS services and Infrastructure as Code.

The role requires deep expertise in AWS networking, CloudFront, WAF, security automation, observability, large-scale log analytics, and cloud-native delivery practices.

Key Responsibilities

Cloud Security & Edge Protection

• Design and implement AWS WAF and CloudFront-based protection architectures.
• Configure managed rule sets, rate-limiting controls, traffic classification, and bot mitigation capabilities.
• Implement layered security controls to identify and mitigate malicious traffic.
• Build and optimize edge caching strategies to reduce origin load and operational costs.

Infrastructure as Code & Platform Engineering

• Develop Infrastructure as Code using AWS CDK, CloudFormation, or Terraform.
• Contribute code through enterprise Git repositories and CI/CD pipelines.
• Create reusable deployment templates, automation scripts, and operational runbooks.
• Support deployment rehearsals and production release preparation.

Observability & Analytics

• Implement logging pipelines using:
  • AWS WAF Logs
  • Kinesis Firehose
  • Amazon S3
  • Amazon Athena
  • CloudWatch
• Develop scheduled analytics queries and reporting frameworks.
• Establish operational dashboards, KPIs, alerting, and performance monitoring.
• Analyse traffic patterns and produce security and cost optimisation insights.

Bot Detection & Threat Intelligence

• Develop traffic profiling and behavioural analysis models.
• Analyse API usage, fingerprinting signals, client patterns, token adoption, and anomaly indicators.
• Produce evidence packs for security reviews and governance gates.
• Measure detection effectiveness, precision, false-positive rates, and operational impact.

AI & Security Automation

• Design and implement AI-assisted operational workflows.
• Build automated analysis and recommendation loops using AWS native services.
• Implement governance guardrails, kill-switch controls, and audit mechanisms.
• Support autonomous or semi-autonomous security response workflows.

Stakeholder Engagement

• Work closely with:
  • Security teams
  • Platform Engineering
  • SRE teams
  • Application Development teams
  • Architecture and Governance forums
• Prepare executive-level reports and decision-gate documentation.
• Facilitate technical workshops and design reviews.

Required Skills

AWS Expertise

• AWS WAF
• Amazon CloudFront
• AWS Shield Advanced
• Amazon Athena
• Amazon S3
• Amazon CloudWatch
• Amazon Kinesis Firehose
• AWS Lambda
• API Security
• Cost Optimisation

Cloud Engineering

• AWS CDK
• CloudFormation
• Terraform
• CI/CD Pipelines
• Git-based development workflows
• Infrastructure Automation

Security & Networking

• Web Application Security
• Bot Management
• API Security
• DDoS Protection
• Identity & Access Management
• Network Security Architecture

Data & Analytics

• SQL / Athena Query Development
• Log Analytics
• Threat Detection
• Data Visualisation
• KPI and Operational Reporting

Preferred Qualifications

• AWS Certified Security Specialty
• AWS Certified Solutions Architect Professional
• AWS Advanced Networking Certification
• Experience delivering security transformation initiatives on AWS.
• Experience working in regulated, enterprise-scale environments.
• Familiarity with AI-driven operations (AIOps), security analytics, and autonomous remediation frameworks.

Success Measures

• Successful implementation of cloud security controls and observability capabilities.
• Reduction in malicious traffic reaching origin services.
• Demonstrated cost optimisation through edge security and caching strategies.
• Delivery of executive-ready evidence packs and operational dashboards.
• Successful transition to operational teams through documented runbooks and knowledge transfer.