Sc Cleared Cloud Security Engineer

Pab Staffing Solutions Ltd; United Kingdom; À distance; GBP 77 000 - 101 000; Temps partiel

Résumé du poste

Pab Staffing Solutions Ltd is seeking an experienced SC Cleared Cloud Security Engineer to join a hands-on cloud security team. You will implement security controls directly in cloud infrastructure and CI/CD pipelines, not just advise.

The role is UK-based, fully remote, up to 12 months, outside IR35, with up to £480/day rate and Active UK SC Clearance required. You will deploy secure AWS infrastructure using Terraform and contribute to security tooling in pipelines.

Qualifications

• Active UK SC Clearance required at mobilisation.
• Strong hands-on AWS engineering experience focused on cloud security.
• Proficient with Terraform, reusable module design and state management.
• Hands-on Python and TypeScript experience.
• Experience with GitHub Actions, including security tooling in pipelines.
• Experience implementing security controls as code.

Responsabilités

• Define and deploy AWS infrastructure using Terraform with security controls.
• Implement and maintain preventative and detective AWS security guardrails (IAM, networking, encryption, logging).
• Integrate security testing into GitHub Actions pipelines (SAST, dependency, IaC, secrets).
• Triage and address security findings from CI/CD tooling.
• Implement secrets and key management per policies.
• Develop Python and TypeScript automation to support vulnerability management and evidence collection.
• Produce security control evidence for CAF or GovAssure.
• Maintain technical docs and sprint artefacts in Confluence and Jira.

Connaissances

AWS engineering

Terraform (IaC)

Python

TypeScript

GitHub Actions security tooling

Security controls as code

CI/CD security integration

Outils

Terraform

GitHub Actions

AWS

Description du poste

SC Cleared Cloud Security Engineer

Location: UK – Fully Remote
Contract: Up to 12 months
Clearance: Active UK SC Clearance required
Rate: Up to £480/day Outside IR35

We are looking for an experienced SC Cleared Cloud Security Engineer to join a hands-on cloud security engineering team supporting secure cloud infrastructure and delivery pipelines.

This is an engineering-focused role. You will be responsible for implementing security controls directly within cloud infrastructure and CI/CD pipelines rather than providing purely advisory or architectural guidance.

Essential Requirements

• Active UK SC Clearance in place at mobilisation
• Strong hands-on AWS engineering experience with a clear focus on cloud security and identity
• Strong production experience with Terraform, including reusable module design and state management
• Hands-on Python and TypeScript experience
• Strong GitHub and GitHub Actions experience, including security tooling within pipelines
• Experience with cloud security controls and secure-by-design principlesExperience implementing security controls as code

Key Responsibilities

• Define and deploy AWS infrastructure using Terraform, embedding security controls such as IAM policies, network segmentation, encryption and logging
• Implement and maintain preventative and detective AWS security guardrails, including Service Control Policies, AWS Config, Security Hub and GuardDuty
• Integrate security testing into GitHub Actions pipelines, including SAST, dependency scanning, IaC scanning and secrets detection
• Triage and address security findings identified through CI/CD security tooling
• Implement secrets and key management in line with security policies
• Develop Python and TypeScript automation and tooling to support vulnerability management and security control evidence collection
• Produce security control evidence suitable for assurance activities such as CAF, GovAssure or equivalent
• Maintain technical documentation and sprint artefacts using Confluence and Jira

Desirable Experience

• AWS Security Specialty or AWS Solutions Architect Associate certification
• UK public sector delivery experience
• Container security experience with ECS or EKS
• Exposure to NCSC guidance, Cyber Assessment Framework (CAF) or Cyber Essentials Plus

Contract Details

• Fully remote UK-based contract
• Up to 12 months
• Outside IR35
• Up to £480 per day
• Active SC Clearance required at mobilisation