Senior Cloud Security Engineer - AI Resilience & Security Enhancements (Contract)

Stack

Responsibilities

• ▹Assess the current cloud security posture across Form3 environments, identifying risks, control gaps and improvement opportunities
• ▹Design and implement scalable cloud security controls that improve the resilience of the cloud-native platform
• ▹Enhance perimeter security controls across cloud infrastructure
• ▹Strengthen CI/CD pipeline security: secure build processes, automated security testing, deployment governance and artefact integrity
• ▹Improve production access security, including RBAC, least privilege, deployment tooling and operational processes
• ▹Enhance software supply chain security: dependency management, container image scanning, provenance, signing and vulnerability remediation
• ▹Contribute to the secure adoption and governance of AI-enabled engineering capabilities (data protection, auditability, operational resilience)
• ▹Provide technical leadership and guidance on cloud security architecture and secure engineering practices
• ▹Produce high-quality technical documentation: solution designs, implementation plans, operational procedures and security evidence
• ▹Collaborate closely with engineering, platform and security teams
• ▹Ensure deliverables align with operational resilience requirements, regulatory obligations and internal security standards
• ▹Deliver changes using structured, low-risk change management while maintaining service availability

Requirements

• ▹Extensive experience designing and implementing cloud security solutions in large-scale cloud-native environments
• ▹Strong hands-on experience securing public cloud platforms (AWS preferred)
• ▹Expertise in cloud security architecture, identity and access management, workload protection and infrastructure security
• ▹Experience securing CI/CD pipelines and modern software delivery practices
• ▹Strong understanding of software supply chain security: dependency management, artefact signing, provenance and vulnerability management
• ▹Experience implementing least-privilege access models and RBAC
• ▹Knowledge of security monitoring, risk assessment and security governance
• ▹Experience working in highly regulated or business-critical production environments
• ▹Excellent stakeholder management and communication skills, with the ability to influence engineering teams
• ▹Strong technical documentation and design skills

Nice to have

• ▹Experience implementing security controls for AI or machine learning platforms
• ▹Knowledge of cryptographic controls and key management
• ▹Experience with Infrastructure as Code and policy-as-code tooling
• ▹Familiarity with payment platforms or financial services environments
• ▹Understanding of operational resilience frameworks and regulatory requirements affecting critical financial infrastructure
• ▹Relevant cloud or security certifications (AWS Security Specialty, CISSP, CCSP or similar)

Soft skills

About the company

Form3 builds a cloud-native, multi-cloud payments platform that is revolutionising the world of payments.