- London, England, United Kingdom
- Hybrid
- Full-time · Mid
Develop cloud-native controls in Azure, AWS and/or GCP to enforce the security baseline at scale, integrating with open-source and vendor tools as needed.
Responsibilities
- Develop cloud-native controls in Azure, AWS and/or GCP to enforce the security baseline at scale
- Enhance product security along the software development lifecycle by creating “paved roads” and defining additional security and software excellence requirements for containerised services running on multiple managed Kubernetes clusters
- Act as a subject matter expert for the Platform and Engineering teams by providing guidance on cloud and k8s services, secure infrastructure-as-code, modern secure AuthZ/AuthN techniques (i.e. SPIFFE) and secrets management solutions
- Collaborate with other teams to define and implement Cloud/K8s native policies and procedures (i.e. Kyverno, Pod Security Standards)
- Conduct security assessments, audits and architecture reviews in order to introduce new cloud controls in the platform and make recommendations to improve the overall security posture