DevSecOps Engineer – Terraform Sentinel Policy Developer

JR United Kingdom; Norwich; Remote; GBP 50,000 - 75,000; Full time

Job summary

Join a leading DevOps consultancy as a Terraform Policy Developer focused on cloud security. Play a pivotal role by developing security policies as code to enhance governance over cloud platforms. If you're passionate about automating and scaling security in cloud environments, apply now to contribute to high-impact projects with a talented team of engineers.

Qualifications

• Experienced DevSecOps or Platform Engineer with strong cloud security grasp.
• Expert in writing and deploying Sentinel policies.
• Solid knowledge of Terraform and cloud-native architecture.

Responsibilities

• Develop 20 new Sentinel policies aligned with AWS best practices.
• Demo and hand over policies to internal teams.
• Document and explain your work to engineers and stakeholders.

Skills

DevSecOps

Terraform

Sentinel

Cloud security automation

Tools

GitLab

AWS

Python

Job description

Social network you want to login/join with:

col-narrow-left

Client:

Location:

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

4

Posted:

26.06.2025

Expiry Date:

10.08.2025

col-wide

Job Description:

? Remote (Occasional travel to London or Edinburgh)

? Contract | 6 Months

Secure the Future of Cloud Development — One Policy at a Time

Are you a hands-on DevSecOps engineer with a passion for embedding security into the development lifecycle? Do you thrive in high-impact environments where your code shapes how cloud platforms are governed?

Join one of Europe’s top DevOps consultancies — a digital transformation leader trusted by major enterprises across the public and private sector. We're looking for a Terraform Policy Developer with Sentinel experience to help design and implement the next generation of cloud controls for a flagship client.

? The Mission

You’ll play a critical role in developing security policies as code, enabling safe, scalable, and developer-friendly adoption of public cloud infrastructure. This is your chance to help a major organisation “shift security left” — catching misconfigurations and vulnerabilities before they go live.

What You'll Do

• Develop 20 new Sentinel policies aligned with AWS best practices and existing Terraform control rules
• ? Use an existing automated testing framework to validate policy behaviour and fail scenarios
• ?️ Demo and hand over policies to internal platform teams and customers
• ? Write clear and practical developer and customer documentation
• ? Showcase policy capabilities across public cloud teams
• ? Lead hands-on sessions with users to drive adoption and gather feedback
• ? Contribute to broader cloud control strategy and parity between Terraform and Sentinel frameworks

Tech Stack & Environment

• Terraform (HCL) – infrastructure as code
• Sentinel – policy as code (Terraform Cloud/Enterprise)
• Python – scripting and automation
• GitLab – CI/CD pipelines and source control
• AWS – primary cloud provider (Azure coming soon)
• Security Frameworks – AWS Foundational Best Practices

Who You Are

• An experienced DevSecOps or Platform Engineer with a strong grasp of cloud security automation
• You’ve written and deployed Sentinel policies and understand how to enforce security guardrails at scale
• Strong working knowledge of Terraform, GitLab, and cloud-native architecture (AWS preferred)
• Able to demo, document, and explain your work to engineers, security teams, and stakeholders
• Autonomous, collaborative, and comfortable with fast-moving environments

Bonus Points For

• Experience with AWS Security Lake
• Familiarity with multi-cloud environments
• Understanding of Cactus (internal Terraform module library)
• Previous experience in public sector or regulated industries

Why Join Us?

• ? Work with a visionary public cloud platform team on a mission to automate and scale security
• ? Collaborate with a tight-knit group of high-calibre engineers solving real-world challenges
• ? Own policy development from discovery to release
• ? Be part of building a developer-friendly security framework
• ? Long-term potential and pipeline of exciting cloud transformation projects

Ready to apply your DevSecOps expertise where it really matters?

Send us your CV today and help reshape cloud security — one line of policy code at a time.