DevSecOps Engineer – Terraform Sentinel Policy Developer

JR United Kingdom; Luton; Remote; GBP 50,000 - 80,000; Full time

Job summary

A leading consultancy in digital transformation seeks a Terraform Policy Developer with DevSecOps expertise. The role focuses on designing security policies for public cloud infrastructures, requiring strong skills in Terraform, AWS, and cloud security automation. Candidates will collaborate with top-tier engineers to drive cloud transformation projects.

Benefits

Long-term potential with exciting projects

Collaborative environment with high-calibre engineers

Qualifications

• Experience in DevSecOps or Platform Engineering with cloud security automation.
• Proficient in writing and deploying Sentinel policies.
• Understanding of cloud-native architecture, preferably AWS.

Responsibilities

• Develop 20 new Sentinel policies aligned with AWS best practices.
• Utilize an automated testing framework to validate policy behavior.
• Document and demonstrate policies to internal teams and customers.

Skills

DevSecOps

Terraform

AWS

Python

GitLab

Job description

Social network you want to login/join with:

col-narrow-left

Client:

Location:

luton, bedfordshire, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

4

Posted:

26.06.2025

Expiry Date:

10.08.2025

col-wide

Job Description:

? Remote (Occasional travel to London or Edinburgh)

? Contract | 6 Months

Secure the Future of Cloud Development — One Policy at a Time

Are you a hands-on DevSecOps engineer with a passion for embedding security into the development lifecycle? Do you thrive in high-impact environments where your code shapes how cloud platforms are governed?

Join one of Europe’s top DevOps consultancies — a digital transformation leader trusted by major enterprises across the public and private sector. We're looking for a Terraform Policy Developer with Sentinel experience to help design and implement the next generation of cloud controls for a flagship client.

? The Mission

You’ll play a critical role in developing security policies as code, enabling safe, scalable, and developer-friendly adoption of public cloud infrastructure. This is your chance to help a major organisation “shift security left” — catching misconfigurations and vulnerabilities before they go live.

What You'll Do

• Develop 20 new Sentinel policies aligned with AWS best practices and existing Terraform control rules
• ? Use an existing automated testing framework to validate policy behaviour and fail scenarios
• ?️ Demo and hand over policies to internal platform teams and customers
• ? Write clear and practical developer and customer documentation
• ? Showcase policy capabilities across public cloud teams
• ? Lead hands-on sessions with users to drive adoption and gather feedback
• ? Contribute to broader cloud control strategy and parity between Terraform and Sentinel frameworks

Tech Stack & Environment

• Terraform (HCL) – infrastructure as code
• Sentinel – policy as code (Terraform Cloud/Enterprise)
• Python – scripting and automation
• GitLab – CI/CD pipelines and source control
• AWS – primary cloud provider (Azure coming soon)
• Security Frameworks – AWS Foundational Best Practices

Who You Are

• An experienced DevSecOps or Platform Engineer with a strong grasp of cloud security automation
• You’ve written and deployed Sentinel policies and understand how to enforce security guardrails at scale
• Strong working knowledge of Terraform, GitLab, and cloud-native architecture (AWS preferred)
• Able to demo, document, and explain your work to engineers, security teams, and stakeholders
• Autonomous, collaborative, and comfortable with fast-moving environments

Bonus Points For

• Experience with AWS Security Lake
• Familiarity with multi-cloud environments
• Understanding of Cactus (internal Terraform module library)
• Previous experience in public sector or regulated industries

Why Join Us?

• ? Work with a visionary public cloud platform team on a mission to automate and scale security
• ? Collaborate with a tight-knit group of high-calibre engineers solving real-world challenges
• ? Own policy development from discovery to release
• ? Be part of building a developer-friendly security framework
• ? Long-term potential and pipeline of exciting cloud transformation projects

Ready to apply your DevSecOps expertise where it really matters?

Send us your CV today and help reshape cloud security — one line of policy code at a time.