Senior Cloud Security Engineer: IAM, IaC & Secure DevOps

Social Security Scotland; Glasgow; Hybrid; GBP 70,000 - 90,000; Full time

Benefits offered by this job

GDD pay supplement £4,000 annual

Job summary

Social Security Scotland is seeking a Senior Cyber Security Engineer on a fixed-term basis (47 months) to secure cloud platforms delivering public services. You will translate policy and risk into practical cloud security solutions, working with Architecture, Cloud Engineering, DevOps and Product teams in a cloud-first, hybrid environment spanning Glasgow or Dundee.

Your role includes designing secure cloud architectures, embedding security from inception, and leading security operations with

Qualifications

• Experience implementing cloud native security controls (IAM, encryption, logging, monitoring).
• Experience embedding security across the full delivery lifecycle.
• Experience with automated security controls and policy as code using IaC tooling.

Responsibilities

• Design and deliver secure cloud architectures across IaaS, PaaS, and SaaS.
• Lead the implementation of cyber security standards across cloud platforms.
• Provide senior cyber security consultancy including risk assessments and audits.
• Collaborate with Architecture teams to shape secure target architectures.
• Lead and enhance cloud security operations: IAM, vulnerability management, logging, monitoring, incident response.
• Design and implement automated security controls and policy as code.

Skills

Cloud security

IAM

Threat modelling

Security monitoring

IaC tooling

Vulnerability management

Incident response

Tools

Terraform

CloudFormation

Policy as code

Job description

Social Security Scotland is seeking a Senior Cyber Security Engineer on a fixed-term basis (47 months) to secure cloud platforms delivering public services. You will translate policy and risk into practical cloud security solutions, working with Architecture, Cloud Engineering, DevOps and Product teams in a cloud-first, hybrid environment spanning Glasgow or Dundee.

Your role includes designing secure cloud architectures, embedding security from inception, and leading security operations with