Cloud Security Control Engineer

Diana Duggan; Greater London; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

Diana Duggan is seeking an experienced Cloud Security Control Engineer for a hybrid role in London or Belfast. The engineer will lead and automate cloud security controls, focusing on AWS security, Python development and IaC with Terraform, while aligning with enterprise security requirements.

The role demands hands-on AWS infrastructure engineering, Open Policy Agent experience, and DevOps/CI/CD collaboration across multiple teams to deliver secure, scalable cloud solutions.

Qualifications

• Experience in AWS security and infrastructure engineering.
• Strong Python development and scripting skills.
• Hands-on experience with Terraform and automation.
• Knowledge of Open Policy Agent (OPA/Rego).
• Background in DevOps/CI/CD and security controls.

Responsibilities

• Design, build and maintain AWS cloud infrastructure.
• Develop automation and engineering solutions using Python.
• Support secure AWS infrastructure across complex environments.
• Automate repetitive infrastructure and operational processes.
• Collaborate with infrastructure, DevOps and security teams to deliver secure cloud solutions.
• Troubleshoot infrastructure, application and cloud issues.
• Contribute to cloud engineering standards and best practices.
• Support Infrastructure as Code and automated deployment approaches.
• Ensure solutions align with security, architecture and operations.
• Contribute to continuous improvement of cloud engineering processes.
• Translate requirements into robust technical solutions with stakeholders.

Skills

AWS security

Python

Terraform

OPA/Rego

DevOps/CI/CD

Security controls

Tools

Splunk

Terraform

Job description

We are looking for an experienced Cloud Security Control Engineer to provide technical leadership and engineering support across cloud security controls within a complex enterprise technology environment.

The role will focus on automating and standardising security controls, identifying and remediating vulnerabilities, supporting secure cloud architecture, and developing technical solutions across AWS infrastructure.

You will have experience in AWS security and infrastructure engineering, Python, Terraform, Open Policy Agent (OPA/Rego), DevOps/CI/CD and security controls .

• Role: Cloud Security Control Engineer
• Contract duration: 6 months initially (with scope to extend)
• Location: London or Belfast (Hybrid – 3 days on site)

Key Responsibilities

• Design, build and maintain AWS cloud infrastructure and workspace environments.
• Develop automation and engineering solutions using Python.
• Support the implementation and management of AWS infrastructure across complex enterprise environments.
• Automate repetitive infrastructure and operational processes to improve efficiency and reliability.
• Work with infrastructure, DevOps and security teams to deliver secure and scalable cloud solutions.
• Troubleshoot and resolve infrastructure, application and cloud environment issues.
• Contribute to cloud engineering standards, patterns and best practices.
• Support Infrastructure as Code and automated deployment approaches.
• Ensure solutions align with enterprise security, architecture and operational requirements.
• Contribute to continuous improvement of cloud engineering processes and tooling.
• Work collaboratively with technical and business stakeholders to translate requirements into robust technical solutions.
• Experience in AWS security and infrastructure engineering, Python, Terraform, Open Policy Agent (OPA/Rego), DevOps/CI/CD and security controls experience.
• Strong commercial experience in AWS cloud engineering.
• Experience working with monitoring, logging or observability platforms such as Splunk.
• Experience with Infrastructure as Code, particularly Terraform.
• Strong hands‑on Python development and scripting experience.
• Proven experience designing, implementing and supporting AWS infrastructure.
• Strong understanding of cloud infrastructure and architecture, including services such as VPC, EC2 and S3.
• Experience with cloud automation and infrastructure engineering.
• Experience working within DevOps / CI/CD environments.