Senior Cloud Security / DevSecOps Architect

Falcon Smart IT (FalconSmartIT); Greater London; On-site; GBP 110,000 - 160,000; Full time

Job summary

Falcon Smart IT invites a Senior Cloud Security / DevSecOps Architect to join our London onsite team. You will lead multi-cloud security architecture, implement IaC with Terraform, and embed policy-as-code in development pipelines.

You will collaborate with Cyber Security, Cloud Engineering and application teams to deploy secure, automated cloud solutions across AWS, Azure and GCP, ensuring governance with CNAPP/CSPM concepts.

Qualifications

• Hands-on experience in multi-cloud (AWS, Azure, GCP).
• Strong knowledge of Terraform, GitLab CI/CD, Azure DevOps, Python and Rego/OPA.
• Experience implementing security controls and policy-based governance.

Responsibilities

• Design, deploy and manage cloud resources across AWS, Azure and GCP.
• Develop and maintain reusable Terraform modules for cloud resource deployment.
• Implement Infrastructure as Code standards and support Terraform-related implementation and troubleshooting.
• Promote reusable, scalable and secure deployment patterns.
• Build, maintain and support CI/CD pipelines using GitLab CI/CD and Azure DevOps.
• Integrate infrastructure and security validations into application deployment pipelines.
• Troubleshoot pipeline failures and security-policy validation issues.
• Develop automation using Python; write Rego/OPA policies for automated security validation.
• Investigate policy violations and remediation guidance.
• Collaborate with Cyber Security, Cloud Engineering and DevOps teams to secure adoption.

Skills

Python

DevSecOps

Cloud security

Policy as code

Tools

Terraform

GitLab CI/CD

Azure DevOps

Job description

Job Title: Senior Cloud Security / DevSecOps Architect

Job Location: London (Onsite)

Job Type: FTE

Role Overview

We are looking for an experienced Senior Cloud Security / DevSecOps Engineer with 10+ years of IT experience and strong expertise in multi-cloud infrastructure, Infrastructure as Code (IaC), CI/CD automation, cloud security and policy-as-code.

The ideal candidate will have hands-on experience across AWS, Azure and GCP, with strong knowledge of Terraform, GitLab CI/CD, Azure DevOps, Python and Rego/OPA. The role will work closely with Cyber Security, Cloud Engineering and application teams to implement security controls, investigate policy-related issues and enable development teams to securely adopt cloud security and automation solutions.

Key Responsibilities

? Design, deploy and manage cloud resources across AWS, Azure and GCP.

? Develop and maintain reusable Terraform modules for cloud resource deployment.

? Implement Infrastructure as Code standards and support application teams with Terraform-related implementation and troubleshooting.

? Promote reusable, scalable and secure infrastructure deployment patterns.

CI/CD & DevSecOps

? Build, maintain and support CI/CD pipelines using GitLab CI/CD and Azure DevOps.

? Integrate infrastructure and security validations into application deployment pipelines.

? Troubleshoot pipeline failures and security-policy validation issues.

? Support development teams in adopting automated security controls within their existing CI/CD workflows.

Automation & Policy as Code

? Develop automation solutions using Python to improve operational efficiency and reduce repetitive manual activities.

? Develop and maintain Rego/OPA policies for automated cloud and Infrastructure as Code security validation.

? Investigate policy failures, false positives and configuration issues.

? Work with application teams to understand policy violations and provide appropriate remediation guidance.

? Strong understanding of cloud security controls across AWS, Azure and GCP.

? Implement and support Azure Policies for governance and security enforcement.

? Work with AWS Service Control Policies (SCPs) and Resource Control Policies (RCPs).

? Understand and troubleshoot cloud IAM roles, permissions and access controls.

? Support secure deployment patterns and cloud governance requirements across multiple cloud environments.

CNAPP / CSPM

? Strong understanding of Cloud-Native Application Protection Platform (CNAPP) and Cloud Security Posture Management (CSPM) concepts.

? Hands-on or operational knowledge of Wiz and CloudGuard.

? Investigate cloud security findings, policy violations and configuration issues identified through CNAPP/CSPM platforms.

? Work with application and Cyber Security teams to understand findings and support remediation.

? Assist application teams with onboarding and adoption of cloud security solutions.

Stakeholder Collaboration & Application Support

? Collaborate closely with Cyber Security, Cloud Engineering, DevOps and application development teams.

? Provide technical guidance to application teams during solution adoption and onboarding.

? Investigate and troubleshoot security policy, Terraform, CI/CD and cloud configuration issues.

? Translate security requirements into practical technical solutions that development teams can implement.

? Provide clear guidance and documentation for security controls, integration patterns and remediation activities.

? Act as a technical point of contact for application teams throughout the adoption lifecycle.

Required Technical Skills

? Infrastructure as Code: Terraform

? Automation: Python

? Policy as Code: Rego / Open Policy Agent (OPA)

? Cloud Security: Azure Policy, AWS SCP, AWS RCP, IAM roles and permissions

? CNAPP / CSPM: Wiz, CloudGuard

? DevSecOps: Integration of security and policy controls into CI/CD workflows

? Troubleshooting: Cloud policy, IaC, pipeline and security control issues

Soft Skills

? Strong communication and stakeholder-management skills.

? Ability to work effectively with both Cyber Security and application development teams.

? Strong problem-solving and troubleshooting capabilities.

? Ability to explain complex security requirements in simple, practical terms.

? Collaborative approach when working with developers, engineers and security stakeholders.

? Ability to guide application teams through onboarding and solution adoption.

? Strong documentation and knowledge-sharing skills.