Senior Cloud Security Engineer - AI Resilience & Security Enhancements (Fixed-term contract)
About this role
Form3 needs to secure its cloud-native payments platform and manage security risks across the engineering ecosystem during a strategic twelve-month programme. This fixed-term contract brings in a specialist to evaluate current cloud posture, close control gaps, and deliver practical resilience improvements across public cloud environments.
Working alongside platform engineering and security groups, the engineer will design scalable cloud security controls, harden software supply chains, and govern AI-enabled engineering capabilities. The person taking on this responsibility must handle complex architectures, influence multidisciplinary teams, and meet strict regulatory standards without slowing down deployment pipelines.
What you will do
- Assess existing cloud security measures across environments to locate control gaps and security risks.
- Build scalable cloud security controls that safeguard a cloud-native payments platform.
- Harden continuous integration and deployment pipelines through automated testing and secure build processes.
- Implement production access controls, role-based access, and least-privilege principles.
- Manage software supply chain security via container scanning, dependency tracking, and artefact signing.
- Contribute to AI governance frameworks by establishing data protection and auditability controls.
- Produce technical documentation and lead security architecture practices across teams.
What you need
- Extensive experience designing and implementing cloud security solutions in large-scale cloud-native environments.
- Strong hands-on experience securing public cloud platforms, with a preference for AWS.
- Expertise in identity and access management, infrastructure security, and workload protection.
- Proven experience securing modern software delivery practices and continuous integration pipelines.
- Comprehensive understanding of software supply chain security, dependency management, and vulnerability remediation.
- Familiarity with security governance, risk assessment, and operation within highly regulated production environments.
- Strong communication, stakeholder management, and technical documentation skills.
Nice to have
- Experience implementing security controls for AI or machine learning platforms
- Knowledge of cryptographic controls and key management
- Experience with Infrastructure as Code and policy-as-code tooling
- Familiarity with payment platforms or financial services environments
- Relevant cloud or security certifications such as AWS Security Specialty, CISSP, or CCSP
Skills and tech stack
Questions candidates ask
Where is the role located and can I work remotely?
This role is 100% remote within the UK. All new team members start their first day in the office to collect the equipment needed for remote work.
What is the duration and contract type?
This position is a 12-month fixed-term contract with Form3. It focuses on delivering a strategic programme of security enhancements.
What does the interview process involve?
The process includes a screening call with the talent team, followed by a cloud security and engineering best practices interview. An optional team interview may follow, and additional stages may occur if needed.
What technologies and platforms will I work with?
The tech stack includes AWS, Kubernetes, Terraform, CI/CD tooling, and container security tooling. You will also work with IAM, software supply chain security tools, and observability platforms.
The application is on the official Form3 - External careers page.
Apply on company site