22 jobs found

Associate Consultant - Secure Cloud / GCP / GDC DevSecOps Join RT Consulting's Associate Consulting workforce Who we are RT Consulting are a trusted management consultancy and service provider. We are proud to hold the Gold Award under the Armed Forces Employer Recognition Scheme. RT are a member of the Government Digital Sustainability Alliance, bringing government, industry, and academia together to improve digital sustainability outcomes for the UK government and its supply chain We deliver highly capable and effective value for money solutions to our clients as the 'customer friend' and trusted partner across Defence, Policing, Central and Local Government. We deploy consultants who ensure alignment with Government policy, stakeholder expectations, and long-term impact goals. We specialise in the delivery of Cloud & Digital Infrastructure services , including multi-cloud engineering (AWS, Azure, GCP), secure cloud platforms, DevSecOps and automation, Site Reliability Engineering, digital workplace technologies, and resilient, scalable infrastructure operations across complex and regulated environments. Your Invitation: We invite you to join our Cloud & Digital Infrastructure consulting team , where we can align you to current and upcoming demand across cloud engineering, secure platform engineering, DevSecOps/SRE, and modern infrastructure transformation. We are particularly building capability in: Google Cloud Platform (GCP) Google Distributed Cloud (GDC) / air-gapped deployments Secure-by-design cloud engineering for Defence and high-assurance environments Kubernetes, containerisation, and Infrastructure-as-Code (Terraform) This includes supporting surge activity for our defence partners delivering secure cloud services into secure environments. Engagement expectations Vetting: Due to the regulated nature of our work and our significant defence portfolio, a minimum of active SC clearance is required. DV-cleared professionals are also in high demand for secure, air-gapped GDC programmes. Working pattern: Projects typically require 2-3 days per week on-site at Southwest client locations including, Corsham & Bristol, with hybrid flexibility where permitted. Fees: Rates are aligned to engagement scope and seniority. What you'll get You join a community of specialists across Defence, Government, Policing and wider Public Sector programmes, where knowledge sharing, peer support and professional connection are part of the culture. Priority access to new consultancy opportunities, including secure GCP/GDC, DevSecOps and platform engineering workstreams. Dedicated relationship support, Ongoing contact with a Relationship Manager who provides guidance, check-ins and forward planning to help minimise gaps between assignments. An invitation to Society events, meetups and community touchpoints, we aim to ensure you feel supported, valued and engaged throughout your consultancy journey. A consultancy environment that reflects our Group Values - Integrity & Respect, Accountability, Collaboration, High Performance, Innovation, Agility, Client Centricity & People Focused. Who you are An experienced Cloud / Platform Engineering professional with capability in one or more of the following: Google Cloud Platform (GCP) or Google Distributed Cloud (GDC) DevOps, DevSecOps or Site Reliability Engineering (SRE) Platform Engineering and secure cloud design Kubernetes and container platforms (GKE / secure clusters) Infrastructure-as-Code (Terraform) Secure cloud operations (IAM, RBAC, networking, secrets management) You are comfortable working within secure, regulated environments and collaborating directly with users and stakeholders to deliver cloud capability at pace. You will need to be well versed in the direction of travel from Government, focused on digital transformation to enhance public services, improve efficiency, and meet the evolving expectations of its citizens. This shift involves modernising outdated systems, leveraging data effectively, and adopting new technologies like Artificial Intelligence (AI). The goal is a more agile, responsive, and citizen-centric government. You are comfortable operating in high-assurance, regulated environments, capable of working independently within secure delivery teams, and adept at designing, deploying and maintaining secure, modern cloud platforms. How to express interest Contact us to arrange a confidential conversation.

Senior Cloud Security Engineer (London or Bristol) We are HealthHero, Europe's largest digital clinic. Join us at a pivotal moment as we scale our digital healthcare platform across Europe - giving you the chance to shape security at the heart of a fast-growing, AI-driven business. We are recruiting an exciting Senior Cloud Security Engineer on an initial 12 month fixed term contract, with a view to becoming permanent - based in either our London or Bristol office two days per week. About the role This role will form a fundamental part of a growing PlatformSecurity function, where the team covers application security, cloud security, security operations, culture and risk management. As a tech-centric organisation the Information Security team will play a critical part in embedding a security-first mindset into application development and continuous application monitoring. This role will co-own the cloud security posture and tooling across HealthHero's AWS and Azure estates and have the opportunity to tackle cloud security with an international scope. The role will be supported by a multidisciplinary force of Infrastructure, Data Governance and Engineering team leads with a security focus as part of their remit. The role has a focus on infrastructure and cloud networking when it comes to security posture. As an experienced Cloud Security Engineer, your working day will include but not be limited to: DevSecOps & SDLC Champion integration of security testing into CI/CD pipelines across all development teams and usage of automated security gates: SAST, DAST, dependency scanning, secrets detection Enable self-serve security tooling for development teams Ability to set up development environment Cloud Security Own cloud security posture management using Wiz (or similar CSPM) Define and enforce cloud security baselines, guardrails, and policies in AWS Implement and maintain IaC security scanning for Terraform Manage IAM policies, network segmentation, and secrets management Configure and tune SIEM (or similar) for cloud-focused detection Establish logging, monitoring, and alerting requirements based on threat modelling Investigate and respond to cloud security events Risk & Compliance Identify, articulate, and escalate security risks to senior leadership with mitigation plans Track and remediate vulnerabilities across infrastructure Manage customer initiatives related to due diligence when required to Support and develop annual programme of Penetration Testing and associated remediations Stakeholder Engagement Partner with internal and stakeholder management to support any requirements from the security function - particularly governance and accreditation requirements across different countries Provide expertise on emerging threats and vulnerabilities Support response to customer/client due diligence requests with timely and accurate information regarding vulnerability exposure Key Skills and Experience Essential Proven experience in application security, DevSecOps, or cloud security Strong understanding of cloud networking Experience securing cloud environments (AWS, Azure) Ability to read and write IAC (Terraform) code, comfortable with IAC lifecycles Familiarity with container security and Kubernetes Understanding of secure coding, penetration testing techniques, SIEM, and vulnerability management Strong technical skills relevant to Information Security such as secure coding standards, ethical hacking techniques, network security and risk analysis Understanding of managing Secure Development Lifecycle and Vulnerability Management. Understanding and practical experience of ISO27001:2022 controls and audit processes Desirable AWS Security Specialty or similar certification Experience in regulated environments (healthcare, financial services) Familiarity with NHS DSPT Technical knowledge of GDPR and data protection requirements Hands-on with CI/CD security tooling and pipeline integration Interest in learning other countries health and security regulations (France / UK / IR / DE) About us We exist to simplify healthcare and improve lives by making care feel instant, intelligent and human. HealthHero is Europe's largest digital health provider , delivering 4 million consultations per year. But we're just getting started. We've built a seamless digital clinic that brings body and mind together - from GP appointments and mental health support to long-term condition management. By sitting behind the world's leading insurers and employers and supporting public health systems, we make it easier for millions of people to get the care they need, exactly when they need it. We are a high-growth, capital-backed business with a sophisticated scale strategy. Our team is a unique blend of those with strong digital experience, management consultants, creatives and industry-leading clinical experts. We aren't just digitising appointments; we're building the next generation of healthcare. We're creating an AI-powered, always-on ecosystem that learns from every interaction to shift the needle from reactive treatment to proactive, sustainable health. At HealthHero, we are digital when it should be and human where it counts. Join us, and help build a next generation health system the world is waiting for. We're proud to be recognised as a which reflects our commitment to creating a supportive and engaging culture. We have also been featured as the fastest growing digital healthcare company of scale in the first Sunday Times 100 Tech list. This recognition shows our impact in the digital health sector and our dedication to innovation and excellence. Committed to achieving excellence in the delivery of person-centred care, we invest in people, resources and technology to continuously improve the quality of its services and organisational culture.

Principal Security Engineer page is loaded Principal Security Engineerlocations: Bexhill: Leicestertime type: Full timeposted on: Posted Todayjob requisition id: We're a digital insurance provider with ambitious plans to become The Best and Biggest in the UK market. Over the past few years, we've made significant investments in our data and tech capabilities, particularly within our CIO function. Our CIO team is at the forefront of driving innovation and ensuring our technology infrastructure supports our ambitious goals. We've nurtured our 4Cs culture, fostering collaboration, creativity, and continuous improvement.We're proud of the journey we're on as a company and know that our continued success will rely on the contribution of our talented colleagues. The CIO team plays a crucial role in this journey, working on cutting-edge projects that enhance our digital presence and improve customer engagement.We provide insurance to nearly four million customers, but we know there's even bigger opportunity out there. The fact you're now reading this job advert means we've tempted you to find out more about - we really hope you like what you see, and you'll join us to share in the success of the exciting chapter that lies ahead.We understand some people may not apply for jobs unless they feel they tick every box. If you are excited about joining us and think you have some of what we are looking for, even if you're not 100% sure, we would love to hear from you. Our CIO team is always looking for passionate individuals who are eager to make a difference and contribute to our success. Job Details Promote a culture where we re-use more which allows us to optimise workflow efficiency and reduce duplication. Guide and coach teams on good security engineering practices and process improvements, helping to build capability and maturity across the organisation. Supports the team in delivering outcomes efficiently, by reducing manual execution. Ensure fast, reliable feedback loops are in place to enable fail-fast delivery and continuous improvement. Define and implement best practices and controls, ensuring adherence and enabling early detection of issues. Drive engagement and collaboration across Scrum Teams and the CIO community, leading the definition and adoption of best practices to enable faster, secure and more reliable delivery. Skills we would love you to have Extensive practical experience in IT Security working in an agile environment. Transformational leadership skills being able to influence decision making and implement new processes and procedures in support of the company's vision. Excellent mentoring skills to support direct reports in their ongoing development Proven experience in designing, implementing, and securing cloud environments, with a strong emphasis on Microsoft Azure services. In-depth knowledge of cloud security best practices, network security, identity and access management, encryption, and secure coding principles. Excellent problem-solving skills and the ability to analyse complex security issues and develop effective solutions. Strong communication and collaboration skills, with the ability to work effectively in cross-functional teams. Track record of successfully designing, building, and deploying scalable, secure, and highly available security infrastructures using Azure. Strong proficiency in leveraging data and advanced analytics to drive decision-making and continuously enhance security solutions. Tools & Technologies: Proficient knowledge of at least on agile methodology (eg Scrum, Kanban, SAFe)Familiar with backlog and test case management in a system of record such as Jira or Octane Expert knowledge using Cloud Technologies Strong understanding of regulatory compliance requirements (e.g. GDPR, ISO 27001, NIST) and experience implementing security controls to meet those requirements. Hands-on experience with Azure Kubernetes Service (AKS) and microservices architecture. Familiarity with DevSecOps methodologies and tools, enabling the seamless integration of security into the development process. Proficiency in Microsoft Defender security assessment tools, vulnerability scanning tools, and SIEM platforms. In-depth understanding of the Microsoft ecosystem, including hands-on experience with Firewalls, IDS/IPS, Load Balancers, Applications Gateways, Proxies, M365, EDR, KQL. Expertise in utilizing Azure DevOps to drive efficient and collaborative development processes, including the development of security solutions and updates in code. Unfortunately, we are unable to progress with candidates that require sponsorship at this time What we offer Join us and you'll find a different way of doing things. We call it the 4Cs. We focus on getting it right for our colleagues, customers, company, and community. As one of our colleagues, you'll be helping to drive our growth, so in return, we'll give you all the support, training and development you need. Not to mention plenty of recognition and rewards, and the scope to voice your ideas and put them into practice. Reward Salary - Attractive salary based on experience + car allowance (pay reviews also completed each year) Flexible Working - We champion a flexible and hybrid working approach so please speak to your recruiter to discuss in more detail, including days in the office and at home. Competitive Bonus Scheme - All colleagues are eligible for our annual 4Cs performance bonus, which is usually paid in March. The scheme is based on Hastings' performance against our business goals and your own personal performance. Physical Wellbeing - as a Band 4 colleague, Hastings pay for you to receive private medical Insurance (also known as PMI) This gives you flexibility and convenience to see a specialist or consultant and allows you to decide when and where you will be seen. Financial Wellbeing - As well as providing you with 4x your salary with our life assurance cover and income protection at no extra cost, pension contribution match up to 10%, we are proud to provide you with an AWARD WINNING package which includes - discounts and cashback at everyday retailers and on our own products, fee free independent mortgage advice, and free access to financial wellbeing support. Mental Wellbeing programme - At Hastings Direct we understand that mental health cannot not be scheduled, that's why we have a range of support to help you keep yourself well. We have the thrive mental health app, our colleague assistance programme available 24/7, our own, in-house mental health first aiders, support groups and a dedicated team to make sure we are covering your needs There's more! - 27 days annual leave + bank holidays, with the option to buy or sell one of your contracted weeks, access to our health care cash back plans, dental plans, discounted health assessments, Cycle to work and tech schemes, discounted and free onsite facilities, social events throughout the year and much more Our 4Cs principles are simple: we believe by creating the right culture for our colleagues and giving them the right tools to do their job, we'll deliver good outcomes for every customer, helping us to grow the company profitably and sustainably and allowing us to invest in the communities we serve.We deliver good outcomes for our customers every time by providing great products at the right price with our simple and straightforward service. We treat customers like we want to be treated - fairly, respectfully and with their best interests at heart.Hastings Group is an equal opportunities employer which means we treat people fairly. We welcome applications from all suitably skilled persons regardless of their gender, age, race, disability, ethnic background, religion/belief, sexual orientation, gender reassignment or marital/family status. Please also

Azure Architect / Senior Cloud Engineer (Infrastructure) - SC Cleared Location: Fully Remote (occasional UK site visits) Rate: Up to 750 per day Contract: Long-term Contract IR35 Status: Inside IR35 Security Clearance: Active SC Clearance required The Role We are looking for an experienced Azure Architect / Senior Cloud Engineer with a strong infrastructure background to support a large-scale secure cloud transformation programme within a highly regulated environment. This role will suit a hands-on senior consultant who can operate across both architecture and engineering disciplines, delivering secure, scalable and resilient Azure infrastructure solutions within complex enterprise environments. Key Responsibilities Design and implement Azure cloud infrastructure solutions Deliver secure and scalable cloud architectures Support cloud migration and transformation initiatives Build and maintain Azure landing zones and governance frameworks Work across hybrid infrastructure environments Produce high and low-level technical designs Implement Infrastructure as Code and automation solutions Collaborate with security, networking and platform teams Ensure compliance with security and operational standards Provide technical leadership across cloud infrastructure delivery Required Skills & Experience Strong Azure architecture and cloud engineering experience Extensive infrastructure engineering background Experience working within secure or highly regulated environments Strong technical knowledge of: Azure IaaS and core platform services Azure networking and connectivity Identity and access management Hybrid cloud infrastructure Enterprise infrastructure technologies Strong Infrastructure as Code experience (Terraform, Bicep or ARM) Experience with CI/CD pipelines and automation tooling Strong understanding of cloud security best practices Ability to work autonomously within complex technical environments Excellent communication and stakeholder engagement skills Desirable Skills Experience within defence, government or secure delivery environments Kubernetes / AKS experience Exposure to DevSecOps practices Experience supporting large-scale enterprise cloud programmes Mandatory Requirements Active SC Clearance Sole UK National status Eligibility to work within highly secure UK environments Additional Information Fully remote working Occasional UK site visits required Long-term engagement Immediate availability preferred

DevSecOps Advisory Consultant Banking Hybrid: Onsite in London 3 days per week 6 months+ £800 - £900 per day In short: Working with the Front Office Product and Business Platform team, we require a strong DevSecOps Consultant to assess our current pipeline and advise on where we can increase our measures of security. We're interested in technical consultants that will look at the minute detail and relate that to the bigger picture. Bering able to present findings to a wide audience will be crucial to make this role a success. We want to know who the leading companies are and how they secure their pipeline so we are very much open to ideas! Within 3-4 months we'd like a full assessment documented and a plan put into place that you will assist in the delivery on. In full: We are seeking a highly skilled and experienced DevSecOps Subject Matter Expert (SME) to lead and advise on the integration of security practices into our DevOps pipelines. This role requires a deep understanding of development, security, and operations, with a strong emphasis on automation, continuous integration/continuous deployment (CI/CD), and secure software development lifecycle (SDLC) practices. Advise and offer guidance on: Design, implement, and maintaining secure CI/CD pipelines. Integrate security tools and practices into DevOps workflows (e.g., SAST, DAST, SCA, secrets management). Collaborate with development, operations, and security teams to implement and ensure secure coding and deployment practices. Advise on threat modeling, risk assessments, and vulnerability management. Provide expert guidance on cloud security (AWS, Azure, GCP) and container security (Docker, Kubernetes). Develop and enforce security policies, standards, and best practices. Lead incident response and root cause analysis for security-related issues. Mentor and train teams on DevSecOps principles and tools. Candidates will ideally show evidence of the above in their CV in order to be considered.Please be advised if you haven't heard from us within 48 hours then unfortunately your application has not been successful on this occasion, we may however keep your details on file for any suitable future vacancies and contact you accordingly. Pontoon is an employment consultancy and operates as an equal opportunities employer.