Senior Cloud Security Engineer - AI Resilience & Security Enhancements (Contract)

Form3 (via Otta); Greater London; Hybrid; GBP 111,000 - 166,000; Part time

Job summary

Form3 is seeking an experienced Senior Cloud Security Engineer on a contract basis to deliver a strategic programme of security enhancements across our cloud-native payments platform. You will partner with Platform Engineering and Security teams to design and implement scalable security improvements that enhance how we build, deploy and operate critical payment infrastructure.

You’ll strengthen cloud platform security, software supply chain security, IAM, RBAC, and AI governance, ensuring

Qualifications

• Design and implement cloud security controls in large-scale environments.
• Secure public cloud platforms (AWS preferred).
• Implement least-privilege access models and RBAC.
• Secure CI/CD pipelines and software delivery practices.
• Knowledge of software supply chain security, artefact signing and provenance.
• Experience with AI governance and regulatory alignment.
• Strong documentation and security design skills.
• Excellent stakeholder management and communication.

Responsibilities

• Assess current cloud security posture and identify risks and gaps.
• Design scalable controls to improve resilience and security of the cloud-native platform.
• Enhance perimeter security across cloud infrastructure.
• Strengthen CI/CD pipeline security and deployment governance.
• Improve production access security with RBAC and least-privilege policies.
• Advance software supply chain security including dependency management and signing.
• Contribute to AI governance, data protection and operational resilience.
• Provide technical leadership on cloud security architecture and practices.
• Produce documentation and implementation plans for security projects.
• Collaborate with engineering, platform and security teams to ensure production-ready changes.

Skills

Cloud security design

IAM & RBAC

CI/CD security

Security governance

Stakeholder management

Technical leadership

Documentation

Cloud-native platforms

Tools

AWS

Kubernetes

Terraform

CI/CD tooling

Container security tooling

Artefact signing

Security monitoring tools

Job description

THEPROJECT

We’relooking for an experienced Senior Cloud Security Engineer to join Form3 on a contract basis to deliver a strategic programme of security enhancements across our cloud-native payments platform.

Focusing on improving cloud security, operationalresilienceand governance across our engineering ecosystem, you will work closely with our Platform Engineering and Security teams to design and implement practical security improvements that enhance how we build,deployandoperatecritical payment infrastructure.

You’llplay a key role in strengthening areas such as cloud platform security, software supply chain security, identity and access management, AI governance, cryptographiccontrolsand automated security assurance, ensuring solutions are scalable, production-ready and aligned with regulatory expectations.

Key responsibilities

• Assess the current cloud security posture across Form3 environments,identifyingrisks, controlgapsand opportunities for improvement.
• Design and implement scalable cloud security controls that improve the resilience and security of our cloud-native platform.
• Enhance perimeter security controls across cloud infrastructure.
• Strengthen CI/CD pipeline security through secure build processes, automated security testing, deploymentgovernanceand artefact integrity.
• Improve production access security, including RBAC, least-privilege implementation, deploymenttoolingand operational processes.
• Enhance software supply chain security through dependency management, container image scanning, provenance,signingand vulnerability remediation.
• Contribute to the secure adoption and governance of AI-enabled engineering capabilities, including controls for data protection,auditabilityand operational resilience.
• Provide technical leadership and guidance on cloud security architecture and secure engineering practices.
• Produce high-quality technical documentation, including solution designs, implementation plans, operationalproceduresand security evidence.
• Collaborate closely with engineering,platformand security teams to deliver maintainable, production-ready security improvements.
• Ensure all deliverables align with operational resilience requirements, regulatoryobligationsand internal security standards.
• Deliver changes using structured,low-riskchange management practices whilemaintainingservice availability.

WE’RE LOOKINGFOR

Essential

• Extensive experience designing and implementing cloud security solutions within large-scale cloud-native environments.
• Strong hands-on experience securing public cloud platforms (AWS preferred).
• Expertisein cloud security architecture, identity and access management, workloadprotectionand infrastructure security.
• Experience securing CI/CD pipelines and modern software delivery practices.
• Strong understanding of software supply chain security, including dependency management, artefact signing, provenance and vulnerability management.
• Experience implementing least-privilege access models and RBAC.
• Knowledge of security monitoring, riskassessmentand security governance.
• Experience working within highly regulated or business-critical production environments.
• Excellent stakeholder management and communication skills, with the ability to influence engineering teams.
• Strong technical documentation and design skills.

Desirable

• Experience implementing security controls for AI or machine learning platforms.
• Knowledge of cryptographic controls and key management.
• Experience with Infrastructure as Code and policy-as-code tooling.
• Familiarity with payment platforms or financial services environments.
• Understanding of operational resilience frameworks and regulatory requirements affecting critical financial infrastructure.
• Relevant cloud or security certifications (AWS Security Specialty, CISSP, CCSP or similar).

TECH STACK

• AWS – Cloud infrastructure and security controls.
• Kubernetes – Container orchestration and workload security.
• Terraform – Infrastructure as Code and security automation.
• CI/CD tooling – Secure software delivery, build security and deployment governance.
• Container security tooling – Image scanning, vulnerabilitymanagementand runtime protection.
• Identity & Access Management (IAM)– Least privilege, RBAC and privileged access controls.
• Software Supply Chain Security – Dependency scanning, artefact signing, provenance and integrity controls.
• Security monitoring & observability platforms – Detection,auditabilityand operational visibility.
• AI governance and security controls – Supporting secure adoption of AI-enabled engineering capabilities.

INTERVIEW PROCESS

Stage 1: Screening Call with Talent Team

Stage 2: Kubernetes & Linux Interview

Stage 3: Cloud Security & Engineering Best Practices interview

We always aim to stick to the above process, however there may be occasions when anadditionalinterview stage is needed for us to be surewe’rehiring the rightfit for the role.

HIRING LOCATIONS

Here are the locations that we are looking to engage with contractors from. Please note, we are not looking to engage with contractors outside of these locations.

• Austria
• Bulgaria
• Croatia
• Cyprus
• Estonia
• Greece
• Hungary
• Italy
• Latvia
• Lithuania
• Malta
• Romania
• Slovakia
• Slovenia

All contractors start their first day in our office to collect the equipment needed to work remotely.

ABOUT FORM3

Revolutionising the world of payments with our cloud-native, multi-cloud platform. For more information about Form3, check out the following pages:

What we do|Life at Form3|Payments CannotFailSeries|.TechPodcast

OUR DEI&B COMMITMENT

We hire talented people from a variety of backgrounds and experiences and are committed to a work environment based on diversity, open-mindedness and curiosity. We’re united by our company values (we even created them together!) and we celebrate our unique differences.

Our employee lifecycle processes are designed to embrace equal opportunity and prevent discrimination against our people regardless of personal characteristics. It is our strong belief that the more inclusive and belonging we are as a business, the better our work will be.

As an inclusive employer, we guarantee to interview all neurodiverse and physically disabled applicants who meet the minimum criteria for this role. We also encourage candidates to notify us of any reasonable adjustments that may be required during the recruitment process. This includes providing job adverts in alternative, accessible formats or adjustments required at interview stage.

If you consider yourself to be neurodiverse or physically disabled under the UN definition of disability and would like to be considered under this scheme and/or require any reasonable adjustments please let us know by sending an email to [e-mail] clearly stating your consent for us to process this data.

For more information please refer to our Recruitment Data Policy.