Senior Cloud Security / DevSecOps Architect

W3Global; Greater London; On-site; GBP 65,000 - 100,000; Full time

Job summary

W3Global seeks a seasoned Cloud Security & DevSecOps professional to design, deploy and manage multi-cloud resources across AWS, Azure and GCP. You will develop reusable Terraform modules and enforce IaC standards to support application teams, while promoting secure, scalable deployment patterns.

You will build and maintain CI/CD pipelines (GitLab CI/CD, Azure DevOps) and integrate security validations, automating policy checks with Rego/OPA and supporting CNAPP/CSPM platforms like Wiz and

Qualifications

• Experience designing and managing cloud resources across AWS, Azure and GCP.
• Hands-on with Terraform and IaC standards.
• Experience integrating security into CI/CD pipelines.
• Ability to advise application teams on policy violations and remediation.

Responsibilities

• Design, deploy and manage cloud resources and Terraform modules.
• Implement IaC standards and support application teams with Terraform.
• Promote secure, scalable infrastructure deployment patterns.
• Collaborate with Cyber Security and DevOps to integrate controls into pipelines.
• Investigate policy and configuration issues and provide remediation guidance.

Skills

AWS

Azure

GCP

CI/CD

Terraform

Automation

Policy as Code

DevSecOps

Troubleshooting

Cloud Security

CNAPP/CSPM

Tools

GitLab CI/CD

Azure DevOps

Python

Rego/OPA

Wiz

CloudGuard

Job description

• Design, deploy and manage cloud resources across AWS, Azure and GCP.
• Develop and maintain reusable Terraform modules for cloud resource deployment.
• Implement Infrastructure as Code standards and support application teams with Terraform-related implementation and troubleshooting.
• Promote reusable, scalable and secure infrastructure deployment patterns.

Key Responsibilities

• Cloud Infrastructure & Terraform
• Design, deploy and manage cloud resources across AWS, Azure and GCP.
• Develop and maintain reusable Terraform modules for cloud resource deployment.
• Implement Infrastructure as Code standards and support application teams with Terraform-related implementation and troubleshooting.
• Promote reusable, scalable and secure infrastructure deployment patterns.

CI/CD & DevSecOps

• Build, maintain and support CI/CD pipelines using GitLab CI/CD and Azure DevOps.
• Integrate infrastructure and security validations into application deployment pipelines.
• Troubleshoot pipeline failures and security-policy validation issues.
• Support development teams in adopting automated security controls within their existing CI/CD workflows.

Automation & Policy as Code

• Develop automation solutions using Python to improve operational efficiency and reduce repetitive manual activities.
• Develop and maintain Rego/OPA policies for automated cloud and Infrastructure as Code security validation.
• Investigate policy failures, false positives and configuration issues.
• Work with application teams to understand policy violations and provide appropriate remediation guidance.

Cloud Security

• Strong understanding of cloud security controls across AWS, Azure and GCP.
• Implement and support Azure Policies for governance and security enforcement.
• Work with AWS Service Control Policies (SCPs) and Resource Control Policies (RCPs).
• Understand and troubleshoot cloud IAM roles, permissions and access controls.
• Support secure deployment patterns and cloud governance requirements across multiple cloud environments.

CNAPP / CSPM

• Strong understanding of Cloud-Native Application Protection Platform (CNAPP) and Cloud Security Posture Management (CSPM) concepts.
• Hands-on or operational knowledge of Wiz and CloudGuard.
• Investigate cloud security findings, policy violations and configuration issues identified through CNAPP/CSPM platforms.
• Work with application and Cyber Security teams to understand findings and support remediation.
• Assist application teams with onboarding and adoption of cloud security solutions.

Stakeholder Collaboration & Application Support

• Collaborate closely with Cyber Security, Cloud Engineering, DevOps and application development teams.
• Provide technical guidance to application teams during solution adoption and onboarding.
• Investigate and troubleshoot security policy, Terraform, CI/CD and cloud configuration issues.
• Translate security requirements into practical technical solutions that development teams can implement.
• Provide clear guidance and documentation for security controls, integration patterns and remediation activities.
• Act as a technical point of contact for application teams throughout the adoption lifecycle.

Required Technical Skills

• Cloud: AWS, Microsoft Azure, GCP
• Infrastructure as Code: Terraform
• Terraform: Resource deployment, reusable module development and troubleshooting
• CI/CD: GitLab CI/CD, Azure DevOps
• Automation: Python
• Policy as Code: Rego / Open Policy Agent (OPA)
• Cloud Security: Azure Policy, AWS SCP, AWS RCP, IAM roles and permissions
• CNAPP / CSPM: Wiz, CloudGuard
• DevSecOps: Integration of security and policy controls into CI/CD workflows
• Troubleshooting: Cloud policy, IaC, pipeline and security control issues

Soft Skills

• Strong communication and stakeholder-management skills.
• Ability to work effectively with both Cyber Security and application development teams.
• Strong problem-solving and troubleshooting capabilities.
• Ability to explain complex security requirements in simple, practical terms.
• Collaborative approach when working with developers, engineers and security stakeholders.
• Ability to guide application teams through onboarding and solution adoption.