Loading...
SeniorFull-timeRailsAWSGCPAzure
Salary Range
$95,472 - $129,168 /year
This salary is estimated based on similar roles. The actual salary may vary.
About the Role
We are looking for a skilled and hands-on Cloud Security Engineer to join Endava. This role is responsible for defining, governing, and continuously improving secure cloud architectures and controls across IaaS, PaaS, and SaaS environments for enterprise clients.
Key Responsibilities
- →Define and maintain cloud security policies, standards, reference architectures, and baseline control frameworks across AWS, Azure, and/or GCP environments.
- →Design secure cloud landing zones, including IAM models, network segmentation, encryption standards, key management, and secrets management.
- →Implement and govern Cloud Security Posture Management (CSPM) capabilities, including risk-based remediation workflows and exception handling.
- →Partner with Cloud Operations and Platform Engineering teams to embed policy-as-code, automated guardrails, and infrastructure-as-code security controls.
- →Standardize logging and monitoring requirements to ensure effective threat detection, investigation, and response across cloud platforms.
- →Conduct security architecture reviews for new cloud services and major platform changes.
- →Support cloud-related incident response activities, including root cause analysis and containment strategies.
- →Contribute to secure development enablement by providing reusable security blueprints, patterns, and anti-pattern guidance.
- →Collaborate with Cyber Defence/SOC teams to ensure cloud telemetry is integrated into SIEM and detection engineering workflows.
- →Support third-party SaaS risk assessments and multi-cloud security risk evaluations where required.
Requirements
- ✓Experience in defining and maintaining cloud security policies and standards.
- ✓Knowledge of secure cloud landing zones and IAM models.
- ✓Familiarity with Cloud Security Posture Management (CSPM) capabilities.
- ✓Ability to embed policy-as-code, automated guardrails, and infrastructure-as-code security controls.
- ✓Strong understanding of logging and monitoring requirements for threat detection.
- ✓Experience with incident response activities and secure development enablement.
- ✓Collaboration skills with Cloud Operations, DevOps, and Product Engineering teams.
