Senior Cloud & Security Engineer

Great Ormond Street Hospital; United Kingdom; Hybrid; GBP 61,000 - 75,000; Full time

Benefits offered by this job

30 days annual leave

Flexible working arrangements

Enhanced pension scheme

Life assurance

Health & wellbeing schemes

Job summary

Great Ormond Street Hospital Children's Charity is seeking a Senior Cloud & Security Engineer to own platform engineering, shaping a cloud-first strategy and a cyber security programme. You will design secure, cost-efficient cloud infrastructure and establish reusable components, while guiding teams through DevSecOps practices.

You will work with AWS (and Azure), implement IaC, and lead security controls, risk assessments and automation.

Qualifications

• Strong hands-on AWS cloud experience with secure infrastructure design and operations.
• Experience designing cloud-native architectures emphasizing scalability, resilience, and cost optimisation.
• Extensive IaC work (Terraform, CloudFormation) and reusable modules.

Responsibilities

• Lead design and delivery of secure, scalable cloud infrastructure across AWS and Azure.
• Develop reusable Terraform modules and standard deployment patterns.
• Build and optimise CI/CD pipelines with integrated security controls.

Skills

AWS

DevSecOps

Terraform

CI/CD

Docker

Linux/Windows

Security

Networking

Automation

Tools

GitLab

GitHub

CloudFormation

Job description

Senior Cloud & Security Engineer

Application Deadline: 13 November 2026

Department: Technology

Employment Type: Permanent

Location: Great Ormond Street Hospital Children's Charity

Reporting To: Daniel Bourne

Compensation: £68,000 / year

Description

Are you an experienced Cloud and Security Engineer with a passion for platform engineering, cloud-native architecture and building secure, scalable infrastructure?

This is an exciting opportunity for a Senior Cloud and Security Engineer to help shape and evolve Great Ormond Street Hospital Children's Charity's cloud platform, playing a key role in our cloud-first transformation and Cyber Security Programme.

Working closely with the Cloud and Security Lead, you'll take technical ownership of complex platform engineering initiatives, designing and delivering secure, resilient and cost-effective cloud infrastructure. You'll help establish reusable infrastructure components, automation and engineering standards that enable teams to deploy and operate cloud services securely and efficiently.

Salary The salary for this position is £68,000 per annum, and we operate a hybrid working policy requiring a minimum of 2 days per week in the office.

In line with our EDI strategy and Total Reward policy, we calculate our salaries based on benchmarking data across the charity sector. To ensure fairness for existing staff and new joiners, we do not offer salaries above the advertised rate.

Key Responsibilities

• Cloud Platform Engineering: Lead the design, implementation and continuous improvement of secure, scalable cloud infrastructure and platform services across AWS and Azure, ensuring alignment with agreed architectural and security standards.
• Platform Architecture: Independently assess technical requirements, evaluate architectural options and deliver cloud-native solutions that balance security, resilience, operational maintainability and cost.
• Infrastructure as Code: Design, develop and maintain reusable Terraform modules, infrastructure components and standardised deployment patterns to enable consistent and secure infrastructure provisioning.
• DevSecOps and CI/CD: Design, build and optimise CI/CD pipelines, integrating automated security controls, infrastructure validation and deployment practices across cloud environments.
• Cloud Security: Implement and maintain security controls across cloud platforms and workloads, including identity and access management, network security, data protection, monitoring and compliance.
• Platform Automation: Develop automation and tooling to streamline infrastructure management, improve reliability, reduce manual intervention and address technical debt.
• Technical Ownership: Independently deliver assigned platform engineering initiatives from discovery and technical design through implementation, validation and operational handover, coordinating dependencies with internal teams and external suppliers.
• Security and Risk Management: Conduct technical risk assessments, support threat modelling and incident investigations, and translate security frameworks and compliance requirements into practical engineering controls.
• Technical Leadership: Provide technical guidance, review engineering solutions and mentor other engineers, promoting reusable patterns, secure engineering practices and continuous improvement.
• Platform Operations: Support the ongoing reliability, observability, performance and cost optimisation of cloud infrastructure, contributing to the evolution of the Charity's cloud-first operating model.

Skills, Knowledge and Expertise

We're looking for a technically strong, hands-on engineer with experience designing, building and operating secure cloud platforms, and the ability to independently deliver complex infrastructure solutions.

Essential Experience and Skills

• Strong hands-on experience with AWS cloud services, architecture and security controls, including designing and operating secure cloud infrastructure.
• Experience designing and implementing cloud-native architectures, with a strong understanding of scalability, resilience, availability and cost optimisation.
• Extensive practical experience with Infrastructure as Code, particularly Terraform or AWS CloudFormation, including developing reusable infrastructure components and modules.
• Experience designing, implementing and maintaining CI/CD pipelines using platforms such as GitLab or GitHub, incorporating automated infrastructure deployments and security controls.
• Strong knowledge of AWS networking, including VPCs, routing, NAT gateways, private endpoints, connectivity and network security.
• Experience implementing DevOps and DevSecOps practices, integrating security and compliance controls into infrastructure delivery.
• Experience building, deploying and managing containerised infrastructure using technologies such as Docker.
• Experience developing automation and tooling using scripting languages such as Bash or PowerShell.
• Experience administering and securing Linux or Windows operating systems.
• Knowledge of cloud security principles and industry frameworks, including CIS, NIST and ISO, and experience translating requirements into practical technical controls.
• Experience conducting technical risk assessments, identifying vulnerabilities and recommending proportionate security improvements.
• Strong technical judgement and problem-solving skills, with the ability to independently assess requirements, evaluate solutions and deliver complex engineering work.
• Excellent communication and collaboration skills, with the ability to work across engineering teams, engage technical suppliers and explain architectural decisions to stakeholders.

Desirable Experience and Skills

• Experience developing reusable platform services, standardised deployment patterns and self-service infrastructure capabilities.
• Experience implementing cloud observability, monitoring and operational resilience practices.
• Experience communicating technical risks, architectural trade-offs and recommendations to senior non-technical stakeholders.
• Experience using programming languages such as Python, Java or C++.
• Hands-on experience with security assessment tools, vulnerability management and penetration testing methodologies.
• Understanding of regulatory and compliance requirements such as GDPR, PCI DSS and SOC 2.
• Industry-recognised cloud or security certifications, such as AWS Certified Solutions Architect.

DBS - note a basic DBS check is required for this role.

Closing Date: 13th November 2026

Benefits

• 30 days annual leave (plus bank holidays)
• A flexible approach to working arrangements.
• Access to our enhanced pension scheme
• Life assurance
• Access to various health and wellbeing schemes, including the employee assistance programme.