Cloud & security engineer

Описание:

Are you an experienced Cloud and Security Engineer with a passion for platform engineering, cloud-native architecture and building secure, scalable infrastructure? This is an exciting opportunity for a Senior Cloud and Security Engineer to help shape and evolve Great Ormond Street Hospital Children's Charity's cloud platform, playing a key role in our cloud-first transformation and Cyber Security Programme. Working closely with the Cloud and Security Lead, you'll take technical ownership of complex platform engineering initiatives, designing and delivering secure, resilient and cost-effective cloud infrastructure.

Задачи:

• Lead the design, implementation and continuous improvement of secure, scalable cloud infrastructure and platform services across AWS and Azure, ensuring alignment with agreed architectural and security standards.
• Independently assess technical requirements, evaluate architectural options and deliver cloud-native solutions that balance security, resilience, operational maintainability and cost.
• Design, develop and maintain reusable Terraform modules, infrastructure components and standardised deployment patterns to enable consistent and secure infrastructure provisioning.
• Design, build and optimise CI/CD pipelines, integrating automated security controls, infrastructure validation and deployment practices across cloud environments.
• Implement and maintain security controls across cloud platforms and workloads, including identity and access management, network security, data protection, monitoring and compliance.
• Develop automation and tooling to streamline infrastructure management, improve reliability, reduce manual intervention and address technical debt.
• Independently deliver assigned platform engineering initiatives from discovery and technical design through implementation, validation and operational handover, coordinating dependencies with internal teams and external suppliers.
• Conduct technical risk assessments, support threat modelling and incident investigations, and translate security frameworks and compliance requirements into practical engineering controls.
• Provide technical guidance, review engineering solutions and mentor other engineers, promoting reusable patterns, secure engineering practices and continuous improvement.
• Support the ongoing reliability, observability, performance and cost optimisation of cloud infrastructure, contributing to the evolution of the Charity's cloud-first operating model.

Требования:

• Strong hands-on experience with AWS cloud services, architecture and security controls, including designing and operating secure cloud infrastructure.
• Experience designing and implementing cloud-native architectures, with a strong understanding of scalability, resilience, availability and cost optimisation.
• Extensive practical experience with Infrastructure as Code, particularly Terraform or AWS CloudFormation, including developing reusable infrastructure components and modules.
• Experience designing, implementing and maintaining CI/CD pipelines using platforms such as GitLab or GitHub, incorporating automated infrastructure deployments and security controls.
• Strong knowledge of AWS networking, including VPCs, routing, NAT gateways, private endpoints, connectivity and network security.
• Experience implementing DevOps and DevSecOps practices, integrating security and compliance controls into infrastructure delivery.
• Experience building, deploying and managing containerised infrastructure using technologies such as Docker.
• Experience developing automation and tooling using scripting languages such as Bash or PowerShell.
• Experience administering and securing Linux or Windows operating systems.
• Knowledge of cloud security principles and industry frameworks, including CIS, NIST and ISO, and experience translating requirements into practical technical controls.
• Experience conducting technical risk assessments, identifying vulnerabilities and recommending proportionate security improvements.
• Strong technical judgement and problem-solving skills, with the ability to independently assess requirements, evaluate solutions and deliver complex engineering work.
• Excellent communication and collaboration skills, with the ability to work across engineering teams, engage technical suppliers and explain architectural decisions to stakeholders.
• DBS - note a basic DBS check is required for this role.

Будет плюсом:

• Experience developing reusable platform services, standardised deployment patterns and self-service infrastructure capabilities.
• Experience implementing cloud observability, monitoring and operational resilience practices.
• Experience communicating technical risks, architectural trade-offs and recommendations to senior non-technical stakeholders.
• Experience using programming languages such as Python, Java or C++.
• Hands-on experience with security assessment tools, vulnerability management and penetration testing methodologies.
• Understanding of regulatory and compliance requirements such as GDPR, PCI DSS and SOC 2.
• Industry-recognised cloud or security certifications, such as AWS Certified Solutions Architect.

Условия:

• The salary for this position is £68,000 per annum, and we operate a hybrid working policy requiring a minimum of 2 days per week in the office.
• In line with our EDI strategy and Total Reward policy, we calculate our salaries based on benchmarking data across the charity sector.
• To ensure fairness for existing staff and new joiners, we do not offer salaries above the advertised rate.
• 30 days annual leave (plus bank holidays)
• A flexible approach to working arrangements.
• Access to our enhanced pension scheme
• Life assurance
• Access to various health and wellbeing schemes, including the employee assistance programme.