SC Cleared Cloud Security Engineer

Pab Staffing Solutions Ltd; Greater London; Remote; GBP 53,000 - 89,000; Full time

Job summary

Pab Staffing Solutions Ltd is seeking an SC-cleared Cloud Security Engineer for a UK-based remote contract. The role focuses on hands-on cloud security engineering within AWS, Terraform, Python, and TypeScript, with emphasis on secure-by-design practices and secure pipelines.

You will define infrastructure, embed security controls, and integrate security testing into CI/CD. Active SC clearance is essential for mobilisation, with a contract up to 12 months and a rate of up to £480/day outside

Qualifications

• Active UK SC Clearance is required at mobilisation.
• Hands-on AWS engineering experience with a focus on cloud security and identity.
• Strong Terraform experience including reusable module design and state management.
• Hands-on Python and TypeScript experience.
• Strong GitHub and GitHub Actions experience, including security tooling within pipelines.
• Experience with cloud security controls and secure-by-design principles; experience implementing security controls as code.

Responsibilities

• Define and deploy AWS infrastructure using Terraform, embedding security controls such as IAM policies, network segmentation, encryption and logging.
• Implement and maintain preventative and detective AWS security guardrails, including Service Control Policies, AWS Config, Security Hub and GuardDuty.
• Integrate security testing into GitHub Actions pipelines, including SAST, dependency scanning, IaC scanning and secrets detection.
• Triage and address security findings identified through CI/CD security tooling.
• Implement secrets and key management in line with security policies.
• Develop Python and TypeScript automation to support vulnerability management and security control evidence collection.
• Produce security control evidence suitable for assurance activities such as CAF, GovAssure or equivalent.
• Maintain technical documentation and sprint artefacts using Confluence and Jira.

Skills

AWS

Terraform

Python

TypeScript

GitHub Actions

Security as code

Cloud security

Tools

AWS

SAST

IaC scanning

Secrets management

Job description

SC Cleared Cloud Security Engineer

Location: UK – Fully Remote
Contract: Up to 12 months
Clearance: Active UK SC Clearance required
Rate: Up to £480/day Outside IR35

We are looking for an experienced SC Cleared Cloud Security Engineer to join a hands-on cloud security engineering team supporting secure cloud infrastructure and delivery pipelines.

This is an engineering-focused role. You will be responsible for implementing security controls directly within cloud infrastructure and CI/CD pipelines rather than providing purely advisory or architectural guidance.

Essential Requirements

• Active UK SC Clearance in place at mobilisation
• Strong hands-on AWS engineering experience with a clear focus on cloud security and identity
• Strong production experience with Terraform, including reusable module design and state management
• Hands-on Python and TypeScript experience
• Strong GitHub and GitHub Actions experience, including security tooling within pipelines
• Experience with cloud security controls and secure-by-design principlesExperience implementing security controls as code

Key Responsibilities

• Define and deploy AWS infrastructure using Terraform, embedding security controls such as IAM policies, network segmentation, encryption and logging
• Implement and maintain preventative and detective AWS security guardrails, including Service Control Policies, AWS Config, Security Hub and GuardDuty
• Integrate security testing into GitHub Actions pipelines, including SAST, dependency scanning, IaC scanning and secrets detection
• Triage and address security findings identified through CI/CD security tooling
• Implement secrets and key management in line with security policies
• Develop Python and TypeScript automation and tooling to support vulnerability management and security control evidence collection
• Produce security control evidence suitable for assurance activities such as CAF, GovAssure or equivalent
• Maintain technical documentation and sprint artefacts using Confluence and Jira

Desirable Experience

• AWS Security Specialty or AWS Solutions Architect Associate certification
• UK public sector delivery experience
• Container security experience with ECS or EKS
• Exposure to NCSC guidance, Cyber Assessment Framework (CAF) or Cyber Essentials Plus

Contract Details

• Fully remote UK-based contract
• Up to 12 months
• Outside IR35
• Up to £480 per day
• Active SC Clearance required at mobilisation