Cloud & security engineer

Great Ormond Street Hospital Charity; Greater London; Hybrid; GBP 61,000 - 75,000; Full time

Benefits offered by this job

Hybrid working

30 days annual leave

Enhanced pension scheme

Life assurance

Employee wellbeing schemes

Job summary

Great Ormond Street Hospital Children's Charity is seeking an experienced Senior Cloud and Security Engineer to shape and evolve its cloud platform. You will lead secure, scalable infrastructure across AWS and Azure, owning complex platform initiatives from design to handover.

You will design reusable Terraform modules, build secure CI/CD pipelines and implement security controls. Mentoring engineers and driving a cloud-first, cost-conscious strategy are key aspects of the role.

Qualifications

• Strong hands-on experience with AWS cloud services, architecture and security controls.
• Experience designing cloud-native architectures with scalability and cost optimisation.
• Infrastructure as Code experience, especially Terraform or CloudFormation.
• CI/CD pipelines using GitLab or GitHub with automated deployments and security controls.
• Knowledge of AWS networking (VPCs, NAT, private endpoints) and security.
• DevSecOps practices and compliance controls in infrastructure delivery.
• Containerised infrastructure with Docker; scripting in Bash or PowerShell.
• Knowledge of CIS, NIST and ISO security frameworks.
• Ability to assess risks, vulnerabilities and propose security improvements.

Responsibilities

• Lead design and implementation of secure, scalable cloud infrastructure.
• Develop reusable Terraform modules and standard deployment patterns.
• Build and optimise CI/CD pipelines with security controls.
• Implement security controls across cloud platforms and workloads.
• Develop automation to improve reliability and reduce manual work.
• Mentor engineers and promote secure engineering practices.
• Support cloud-first operating model and cost optimisation.

Skills

AWS cloud services

cloud-native architecture

Terraform

CI/CD pipelines

DevSecOps

Docker

Linux/Windows security

security frameworks CIS/NIST/ISO

threat modelling

Tools

Terraform

CloudFormation

GitLab

GitHub

Docker

Job description

Описание:

Are you an experienced Cloud and Security Engineer with a passion for platform engineering, cloud-native architecture and building secure, scalable infrastructure? This is an exciting opportunity for a Senior Cloud and Security Engineer to help shape and evolve Great Ormond Street Hospital Children's Charity's cloud platform, playing a key role in our cloud-first transformation and Cyber Security Programme. Working closely with the Cloud and Security Lead, you'll take technical ownership of complex platform engineering initiatives, designing and delivering secure, resilient and cost-effective cloud infrastructure.

Задачи:

• Lead the design, implementation and continuous improvement of secure, scalable cloud infrastructure and platform services across AWS and Azure, ensuring alignment with agreed architectural and security standards.
• Independently assess technical requirements, evaluate architectural options and deliver cloud-native solutions that balance security, resilience, operational maintainability and cost.
• Design, develop and maintain reusable Terraform modules, infrastructure components and standardised deployment patterns to enable consistent and secure infrastructure provisioning.
• Design, build and optimise CI/CD pipelines, integrating automated security controls, infrastructure validation and deployment practices across cloud environments.
• Implement and maintain security controls across cloud platforms and workloads, including identity and access management, network security, data protection, monitoring and compliance.
• Develop automation and tooling to streamline infrastructure management, improve reliability, reduce manual intervention and address technical debt.
• Independently deliver assigned platform engineering initiatives from discovery and technical design through implementation, validation and operational handover, coordinating dependencies with internal teams and external suppliers.
• Conduct technical risk assessments, support threat modelling and incident investigations, and translate security frameworks and compliance requirements into practical engineering controls.
• Provide technical guidance, review engineering solutions and mentor other engineers, promoting reusable patterns, secure engineering practices and continuous improvement.
• Support the ongoing reliability, observability, performance and cost optimisation of cloud infrastructure, contributing to the evolution of the Charity's cloud-first operating model.

Требования:

• Strong hands-on experience with AWS cloud services, architecture and security controls, including designing and operating secure cloud infrastructure.
• Experience designing and implementing cloud-native architectures, with a strong understanding of scalability, resilience, availability and cost optimisation.
• Extensive practical experience with Infrastructure as Code, particularly Terraform or AWS CloudFormation, including developing reusable infrastructure components and modules.
• Experience designing, implementing and maintaining CI/CD pipelines using platforms such as GitLab or GitHub, incorporating automated infrastructure deployments and security controls.
• Strong knowledge of AWS networking, including VPCs, routing, NAT gateways, private endpoints, connectivity and network security.
• Experience implementing DevOps and DevSecOps practices, integrating security and compliance controls into infrastructure delivery.
• Experience building, deploying and managing containerised infrastructure using technologies such as Docker.
• Experience developing automation and tooling using scripting languages such as Bash or PowerShell.
• Experience administering and securing Linux or Windows operating systems.
• Knowledge of cloud security principles and industry frameworks, including CIS, NIST and ISO, and experience translating requirements into practical technical controls.
• Experience conducting technical risk assessments, identifying vulnerabilities and recommending proportionate security improvements.
• Strong technical judgement and problem-solving skills, with the ability to independently assess requirements, evaluate solutions and deliver complex engineering work.
• Excellent communication and collaboration skills, with the ability to work across engineering teams, engage technical suppliers and explain architectural decisions to stakeholders.
• DBS - note a basic DBS check is required for this role.

Будет плюсом:

• Experience developing reusable platform services, standardised deployment patterns and self-service infrastructure capabilities.
• Experience implementing cloud observability, monitoring and operational resilience practices.
• Experience communicating technical risks, architectural trade-offs and recommendations to senior non-technical stakeholders.
• Experience using programming languages such as Python, Java or C++.
• Hands-on experience with security assessment tools, vulnerability management and penetration testing methodologies.
• Understanding of regulatory and compliance requirements such as GDPR, PCI DSS and SOC 2.
• Industry-recognised cloud or security certifications, such as AWS Certified Solutions Architect.

Условия:

• The salary for this position is £68,000 per annum, and we operate a hybrid working policy requiring a minimum of 2 days per week in the office.
• In line with our EDI strategy and Total Reward policy, we calculate our salaries based on benchmarking data across the charity sector.
• To ensure fairness for existing staff and new joiners, we do not offer salaries above the advertised rate.
• 30 days annual leave (plus bank holidays)
• A flexible approach to working arrangements.
• Access to our enhanced pension scheme
• Life assurance
• Access to various health and wellbeing schemes, including the employee assistance programme.