Cloud Security Engineer

ASOS.com Ltd; Crawley; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading organization in digital assets is seeking a Cloud & Security Engineer to design, implement, and maintain secure multi-cloud environments. The role involves supporting cloud onboarding processes, managing AWS/Azure security, and collaborating with DevOps teams to ensure secure deployment practices. Candidates should have proficiency with Terraform or CloudFormation, strong cloud security experience, and skills in Python and scripting. This position emphasizes a security-focused approach with innovative technology solutions.

Qualifications

• Proficiency with Terraform or CloudFormation and secure cloud provisioning practices.
• Strong experience with AWS and/or Azure security models and native services.
• Hands-on knowledge of IAM, VPC/VNet configuration, firewalls, WAFs, and encryption.

Responsibilities

• Support onboarding and offboarding to cloud platforms, improving workflows and user experience.
• Design, implement, and maintain secure AWS/Azure environments.
• Integrate security testing into CI/CD pipelines to meet internal policies.

Skills

Terraform

CloudFormation

AWS Security

Azure Security

Python

Bash

PowerShell

DevSecOps

Job description

Cloud & Security Engineer

Our client is a leading organisation in the digital asset space, supporting institutional partners with secure, innovative technology solutions. We are seeking a Cloud & Security Engineer to design, implement, and maintain secure multi‑cloud environments while strengthening our overall security posture.

Responsibilities

• Support onboarding and offboarding to cloud platforms, improving workflows and user experience.
• Design, implement, and maintain secure AWS/Azure environments, including IAM, network security, segmentation, and encryption.
• Manage cloud operations, including asset inventory, performance monitoring, backup processes, and BCP/DR readiness.
• Implement and manage native cloud security services (e.g., AWS Security Hub, GuardDuty, Azure Defender, Key Vault, Azure Policy).
• Build security automation and IaC‑driven deployments using Terraform or CloudFormation.
• Integrate security testing into CI/CD pipelines (SAST, DAST, IaC scanning) and ensure cloud infrastructure meets internal policies and regulatory standards.
• Configure cloud‑native logging, monitoring, and incident response workflows.
• Collaborate with DevOps and IT teams to guide secure deployment practices.
• Maintain documentation, runbooks, SOPs, and incident response playbooks.

Qualifications

Requirements: Proficiency with Terraform or CloudFormation and secure cloud provisioning practices. Strong experience with AWS and/or Azure security models and native services. Scripting and automation experience (Python, Bash, PowerShell). Hands‑on knowledge of IAM, VPC/VNet configuration, firewalls, WAFs, and encryption. Understanding of DevSecOps and CI/CD tooling (GitHub Actions, Bitbucket). Ability to work with vendors and maintain accurate documentation. 3+ years in Cloud Security, DevOps, or SRE roles with a strong security focus. Bonus: experience in regulated environments, relevant cloud/security certifications, or AI‑enhanced security tools.