Security Engineer: AWS Cloud Migration & Automation (Remote)

Version 1; Belfast City District; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Quarterly profit share

Career progression programs

Flexible/remote working

Pension & Private healthcare

Gym discounts

Educational assistance AWS/Microsoft/…

Annual Excellence Awards

Job summary

Version 1 is seeking a hands-on Security Engineer to embed in a large cloud migration program, moving workloads into AWS with secure, auditable posture. You’ll design, automate, and enforce security controls across the migration lifecycle, combining cloud security architecture with infrastructure‑as‑code and Python automation.

The role covers security tooling, IAM, encryption, and compliance across multi-account AWS environments, with collaboration across migration, platform, and applications

Qualifications

• 4+ years in security engineering, cloud security, or infrastructure security.
• Proven experience securing production AWS environments.
• Experience delivering or securing a cloud migration programme.
• Strong scripting/automation in Python.
• IaC in production using Terraform or CloudFormation.
• Comfortable in a GitLab-based DevSecOps workflow.
• Knowledge of security frameworks and compliance standards.

Responsibilities

• Define and implement security controls and landing zone baseline for workloads migrating to AWS.
• Operate AWS-native security tooling across accounts and Organizations.
• Build security automation in Python (Lambda, remediation scripts, config rules).
• Maintain infrastructure-as-code for security services (Terraform/CloudFormation).
• Integrate security scanning into GitLab CI/CD pipelines (SAST, IaC, secrets).
• Assess and remediate security posture during migration—identify misconfigurations/vulnerabilities.

Skills

Security engineering

Cloud security

Python scripting

DevSecOps

Migration experience

Tools

AWS Security Hub

GuardDuty

AWS Config

IAM/IAM Identity Center

KMS & ACM

WAF & Shield

Inspector

CloudTrail

Organizations & SCPs

Secrets Manager / Systems Manager

Macie

Control Tower / Landing Zone

Terraform

CloudFormation

Policy-as-code (OPA/Conftest/Checkov/tfsec)

Job description

Version 1 is seeking a hands-on Security Engineer to embed in a large cloud migration program, moving workloads into AWS with secure, auditable posture. You’ll design, automate, and enforce security controls across the migration lifecycle, combining cloud security architecture with infrastructure‑as‑code and Python automation.

The role covers security tooling, IAM, encryption, and compliance across multi-account AWS environments, with collaboration across migration, platform, and applications