Senior Cloud Security Engineer

About the role

Form3 is seeking a Senior Cloud Security Engineer for a 12-month fixed-term contract to deliver a strategic programme of security enhancements. You will work with Platform Engineering and Security teams to design and implement practical improvements to the cloud-native payments platform, focusing on operational resilience, governance, and security across the engineering ecosystem.

Responsibilities

• Assess the current cloud security posture across Form3 environments, identifying risks, control gaps and opportunities for improvement.
• Design and implement scalable cloud security controls that improve the resilience and security of our cloud-native platform.
• Enhance perimeter security controls across cloud infrastructure.
• Strengthen CI/CD pipeline security through secure build processes, automated security testing, deployment governance and artefact integrity.
• Improve production access security, including RBAC, least-privilege implementation, deployment tooling and operational processes.
• Enhance software supply chain security through dependency management, container image scanning, provenance, signing and vulnerability remediation.
• Contribute to the secure adoption and governance of AI-enabled engineering capabilities, including controls for data protection, auditability and operational resilience.
• Provide technical leadership and guidance on cloud security architecture and secure engineering practices.
• Produce high-quality technical documentation, including solution designs, implementation plans, operational procedures and security evidence.
• Collaborate closely with engineering, platform and security teams to deliver maintainable, production-ready security improvements.
• Ensure all deliverables align with operational resilience requirements, regulatory obligations and internal security standards.
• Deliver changes using structured, low-risk change management practices while maintaining service availability.

Required skills

• Cloud security
• AWS
• Cloud security architecture
• Identity and Access Management
• Workload protection
• Infrastructure security
• CI/CD pipeline security
• Software supply chain security
• RBAC
• Security monitoring
• Risk assessment
• Security governance

Nice to have

• AI security
• Machine learning security
• Cryptographic controls
• Key management
• Infrastructure as Code
• Policy-as-code
• Payment platforms
• Financial services
• Operational resilience

Certifications

• AWS Certified Security - Specialty
• CISSP
• CCSP