Senior Cloud Security Engineer

About the role

Form3 is seeking a Senior Cloud Security Engineer for a 12-month fixed-term contract to deliver a strategic security enhancement programme. You will work with Platform Engineering and Security teams to design and implement practical security improvements across the cloud-native payments platform, focusing on operational resilience and governance.

Responsibilities

• Assess the current cloud security posture across Form3 environments, identifying risks, control gaps and opportunities for improvement.
• Design and implement scalable cloud security controls that improve the resilience and security of our cloud-native platform.
• Enhance perimeter security controls across cloud infrastructure.
• Strengthen CI/CD pipeline security through secure build processes, automated security testing, deployment governance and artefact integrity.
• Improve production access security, including RBAC, least-privilege implementation, deployment tooling and operational processes.
• Enhance software supply chain security through dependency management, container image scanning, provenance, signing and vulnerability remediation.
• Contribute to the secure adoption and governance of AI-enabled engineering capabilities, including controls for data protection, auditability and operational resilience.
• Provide technical leadership and guidance on cloud security architecture and secure engineering practices.

Required skills

• Cloud security
• AWS
• Cloud security architecture
• Identity and Access Management
• CI/CD pipeline security
• Software supply chain security
• RBAC
• Security monitoring
• Risk assessment
• Security governance

Nice to have

• AI security
• Machine learning security
• Cryptographic controls
• Key management
• Infrastructure as Code
• Policy-as-code
• Payment platforms

Certifications

• AWS Security Specialty
• CISSP
• CCSP