Senior Cloud Security / DevSecOps Architect

Job Title: Senior Cloud Security / DevSecOps ArchitectJob Location: London (Onsite)Job Type: FTERole OverviewWe are looking for an experienced Senior Cloud Security / DevSecOps Engineer with 10+ years of IT experience and strong expertise in multi-cloud infrastructure, Infrastructure as Code (IaC), CI/CD automation, cloud security and policy-as-code.The ideal candidate will have hands-on experience across AWS, Azure and GCP, with strong knowledge of Terraform, GitLab CI/CD, Azure DevOps, Python and Rego/OPA. The role will work closely with Cyber Security, Cloud Engineering and application teams to implement security controls, investigate policy-related issues and enable development teams to securely adopt cloud security and automation solutions.Key ResponsibilitiesCloud Infrastructure & TerraformDesign, deploy and manage cloud resources across AWS, Azure and GCP.Develop and maintain reusable Terraform modules for cloud resource deployment.Implement Infrastructure as Code standards and support application teams with Terraform-related implementation and troubleshooting.Promote reusable, scalable and secure infrastructure deployment patterns.CI/CD & DevSecOpsBuild, maintain and support CI/CD pipelines using GitLab CI/CD and Azure DevOps.Integrate infrastructure and security validations into application deployment pipelines.Troubleshoot pipeline failures and security-policy validation issues.Support development teams in adopting automated security controls within their existing CI/CD workflows.Automation & Policy as CodeDevelop automation solutions using Python to improve operational efficiency and reduce repetitive manual activities.Develop and maintain Rego/OPA policies for automated cloud and Infrastructure as Code security validation.Investigate policy failures, false positives and configuration issues.Work with application teams to understand policy violations and provide appropriate remediation guidance.Cloud SecurityStrong understanding of cloud security controls across AWS, Azure and GCP.Implement and support Azure Policies for governance and security enforcement.Work with AWS Service Control Policies (SCPs) and Resource Control Policies (RCPs).Understand and troubleshoot cloud IAM roles, permissions and access controls.Support secure deployment patterns and cloud governance requirements across multiple cloud environments.CNAPP / CSPMStrong understanding of Cloud-Native Application Protection Platform (CNAPP) and Cloud Security Posture Management (CSPM) concepts.Hands-on or operational knowledge of Wiz and CloudGuard.Investigate cloud security findings, policy violations and configuration issues identified through CNAPP/CSPM platforms.Work with application and Cyber Security teams to understand findings and support remediation.Assist application teams with onboarding and adoption of cloud security solutions.Stakeholder Collaboration & Application SupportCollaborate closely with Cyber Security, Cloud Engineering, DevOps and application development teams.Provide technical guidance to application teams during solution adoption and onboarding.Investigate and troubleshoot security policy, Terraform, CI/CD and cloud configuration issues.Translate security requirements into practical technical solutions that development teams can implement.Provide clear guidance and documentation for security controls, integration patterns and remediation activities.Act as a technical point of contact for application teams throughout the adoption lifecycle.Required Technical SkillsCloud: AWS, Microsoft Azure, GCPInfrastructure as Code: TerraformTerraform: Resource deployment, reusable module development and troubleshootingCI/CD: GitLab CI/CD, Azure DevOpsAutomation: PythonPolicy as Code: Rego / Open Policy Agent (OPA)Cloud Security: Azure Policy, AWS SCP, AWS RCP, IAM roles and permissionsCNAPP / CSPM: Wiz, CloudGuardDevSecOps: Integration of security and policy controls into CI/CD workflowsTroubleshooting: Cloud policy, IaC, pipeline and security control issuesSoft SkillsStrong communication and stakeholder-management skills.Ability to work effectively with both Cyber Security and application development teams.Strong problem-solving and troubleshooting capabilities.Ability to explain complex security requirements in simple, practical terms.Collaborative approach when working with developers, engineers and security stakeholders.Ability to guide application teams through onboarding and solution adoption.Strong documentation and knowledge-sharing skills.