Senior DevSecOps Architect – Cloud Security & Automation

Forterro; United Kingdom; Hybrid; GBP 120,000 - 170,000; Full time

Job summary

Forterro seeks a Senior DevSecOps Engineer to close the operational gap between security tooling, platform automation and CloudOps execution across a multi-product AWS SaaS estate. This hands-on role works within Cloud Platform to implement controls via infrastructure-as-code, GitOps workflows, CI/CD pipelines and runbooks.

You will own cloud workload protection, vulnerability and patch management automation, network perimeter controls, container and serverless security, and deployment health

Qualifications

• 5+ years hands-on experience in DevSecOps, Cloud Security Engineering, Platform Engineering or senior cloud engineering roles.
• Proficient with infrastructure-as-code, GitOps and CI/CD tooling.
• Strong knowledge of AWS security architecture and services.

Responsibilities

• Design, implement and maintain AWS security controls across IAM, networking, encryption, logging, account governance and guardrails.
• Implement and maintain AWS-native security services and governance patterns.
• Harden AWS accounts, services and workloads against CIS Benchmarks and Forterro baselines.
• Translate security requirements into infrastructure-as-code, policy-as-code and reusable automation modules.
• Own the reliable deployment, configuration and operational health of security tooling across cloud and workload environments.
• Ensure CrowdStrike Falcon endpoint and cloud workload protection is deployed and reporting correctly.
• Ensure Tenable scanning coverage is complete with remediation workflows and evidence reporting.
• Operate and improve ManageEngine-based patch tooling and workflows.
• Troubleshoot failed security-tool deployments and configuration drift across IAM, networking, Kubernetes, host agents, APIs, CI/CD and platform automation.

Skills

DevSecOps

Cloud security

GitOps

CI/CD

Kubernetes

AWS

SRE

Education

AWS Certified Security – Specialty

CKS / CISSP / CCSP / GIAC

Terraform Associate

Tools

CrowdStrike

Tenable

ManageEngine

Fortinet

Cloudflare

AWS security services

Job description

Forterro seeks a Senior DevSecOps Engineer to close the operational gap between security tooling, platform automation and CloudOps execution across a multi-product AWS SaaS estate. This hands-on role works within Cloud Platform to implement controls via infrastructure-as-code, GitOps workflows, CI/CD pipelines and runbooks.

You will own cloud workload protection, vulnerability and patch management automation, network perimeter controls, container and serverless security, and deployment health