Cloud Security Engineer: AWS Migration & IaC Automation

Version 1; Birmingham; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Quarterly Profit Share

Career progression & mentorship

Flexible/remote working

Pension & Private healthcare

Wellbeing & life insurance

Educational assistance & AWS certs

Awards & recognition

Diversity & inclusion initiatives

Job summary

Version 1 is seeking a hands-on Security Engineer to embed within a large-scale cloud migration to AWS. You will design, automate, and enforce security controls across the migration lifecycle, using Python automation, IaC (Terraform/CloudFormation), and GitLab CI/CD to ensure a secure, auditable posture.

You will collaborate with migration, platform, and app teams, implement least-privilege IAM models, encryption standards, and compliance evidence for CIS/NIST/ISO/SOC2 as applicable.

Qualifications

• 4+ years in security engineering, cloud security, or infrastructure security.
• Hands-on experience securing production AWS environments.
• Experience delivering or securing a cloud migration programme.
• Strong scripting/automation with Python.

Responsibilities

• Define and implement security controls, guardrails, and landing zone baseline for AWS migrations.
• Design and operate AWS-native security tooling across accounts/Organizations.
• Build security automation in Python for Lambdas, scripts, and SIEM integrations.
• Author, review, and maintain IaC (Terraform/CloudFormation) for security services and IAM.
• Integrate security into GitLab CI/CD pipelines (SAST, IaC scans, secrets).
• Assess security posture during migration and remediate misconfigurations.

Skills

AWS Security Hub

GuardDuty

AWS Config

IAM / IAM Identity Center

KMS & ACM

WAF & Shield

Inspector

CloudTrail

Organizations & SCPs

Secrets Manager / SSM

Macie

Control Tower / Landing Zone

Python

Terraform

CloudFormation

Policy-as-code (OPA/Conftest/Checkov/t

GitLab

SAST/DAST/IaC scanning

IaC scanning tools

Tools

Terraform

CloudFormation

GitLab

Checkov

tfsec

OPA/Conftest

Job description

Version 1 is seeking a hands-on Security Engineer to embed within a large-scale cloud migration to AWS. You will design, automate, and enforce security controls across the migration lifecycle, using Python automation, IaC (Terraform/CloudFormation), and GitLab CI/CD to ensure a secure, auditable posture.

You will collaborate with migration, platform, and app teams, implement least-privilege IAM models, encryption standards, and compliance evidence for CIS/NIST/ISO/SOC2 as applicable.