About the role
<p><strong><span data-contrast="none">THE PROJECT </span></strong><span data-contrast="none">📝</span><span data-ccp-props="{"201341983":0,"335559739":160,"335559740":276}"> </span></p>
<p><span data-contrast="auto">We're looking for an experienced </span><strong><span data-contrast="auto">Senior Cloud Security Engineer</span></strong><span data-contrast="auto"> to join Form3 on a 12 month fixed term contract basis to deliver a strategic programme of security enhancements across our cloud-native payments platform.</span><span data-ccp-props="{"201341983":0,"335559685":0,"335559739":160,"335559740":276}"> </span></p>
<p><span data-contrast="auto">Focusing on improving cloud security, operational resilience and governance across our engineering ecosystem, you will work closely with our Platform Engineering and Security teams to design and implement practical security improvements that enhance how we build, deploy and operate critical payment infrastructure.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559685":0,"335559738":240,"335559739":240}"> </span></p>
<p><span data-contrast="auto">You'll play a key role in strengthening areas such as cloud platform security, software supply chain security, identity and access management, AI governance, cryptographic controls and automated security assurance, ensuring solutions are scalable, production-ready and aligned with regulatory expectations.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559685":0,"335559738":240,"335559739":240}"> </span></p>
<p><strong><span data-contrast="auto">Key responsibilities</span></strong><span data-ccp-props="{"134233117":false,"134233118":false,"335559685":0,"335559738":240,"335559739":240}"> </span></p>
<ul>
<li><span data-contrast="auto">Assess the current cloud security posture across Form3 environments, identifying risks, control gaps and opportunities for improvement.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Design and implement scalable cloud security controls that improve the resilience and security of our cloud-native platform.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Enhance perimeter security controls across cloud infrastructure.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Strengthen CI/CD pipeline security through secure build processes, automated security testing, deployment governance and artefact integrity.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Improve production access security, including RBAC, least-privilege implementation, deployment tooling and operational processes.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Enhance software supply chain security through dependency management, container image scanning, provenance, signing and vulnerability remediation.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Contribute to the secure adoption and governance of AI-enabled engineering capabilities, including controls for data protection, auditability and operational resilience.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Provide technical leadership and guidance on cloud security architecture and secure engineering practices.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Produce high-quality technical documentation, including solution designs, implementation plans, operational procedures and security evidence.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Collaborate closely with engineering, platform and security teams to deliver maintainable, production-ready security improvements.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Ensure all deliverables align with operational resilience requirements, regulatory obligations and internal security standards.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Deliver changes using structured, low-risk change management practices while maintaining service availability.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
</ul>
<p><span data-ccp-props="{"201341983":0,"335559739":160,"335559740":276}"> </span></p>
<p><strong><span data-contrast="none">WE’RE LOOKING FOR </span></strong><span data-contrast="none">🔍</span><span data-ccp-props="{"201341983":0,"335559739":160,"335559740":276}"> </span></p>
<p><strong><span data-contrast="none">Essential</span></strong><span data-ccp-props="{"201341983":0,"335559685":0,"335559739":160,"335559740":276}"> </span></p>
<ul>
<li><span data-contrast="auto">Extensive experience designing and implementing cloud security solutions within large-scale cloud-native environments.</span><span data-ccp-props="{"201341983":0,"335559739":160,"335559740":276}"> </span></li>
<li><span data-contrast="auto">Strong hands-on experience securing public cloud platforms (AWS preferred).</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Expertise in cloud security architecture, identity and access management, workload protection and infrastructure security.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Experience securing CI/CD pipelines and modern software delivery practices.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Strong understanding of software supply chain security, including dependency management, artefact signing, provenance and vulnerability management.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Experience implementing least-privilege access models and RBAC.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Knowledge of security monitoring, risk assessment and security governance.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Experience working within highly regulated or business-critical production environments.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Excellent stakeholder management and communication skills, with the ability to influence engineering teams.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Strong technical documentation and design skills.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
</ul>
<p><span data-ccp-props="{"201341983":0,"335559685":0,"335559739":160,"335559740":276}"> </span></p>
<p><strong><span data-contrast="none">Desirable</span></strong><sp
<p><span data-contrast="auto">We're looking for an experienced </span><strong><span data-contrast="auto">Senior Cloud Security Engineer</span></strong><span data-contrast="auto"> to join Form3 on a 12 month fixed term contract basis to deliver a strategic programme of security enhancements across our cloud-native payments platform.</span><span data-ccp-props="{"201341983":0,"335559685":0,"335559739":160,"335559740":276}"> </span></p>
<p><span data-contrast="auto">Focusing on improving cloud security, operational resilience and governance across our engineering ecosystem, you will work closely with our Platform Engineering and Security teams to design and implement practical security improvements that enhance how we build, deploy and operate critical payment infrastructure.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559685":0,"335559738":240,"335559739":240}"> </span></p>
<p><span data-contrast="auto">You'll play a key role in strengthening areas such as cloud platform security, software supply chain security, identity and access management, AI governance, cryptographic controls and automated security assurance, ensuring solutions are scalable, production-ready and aligned with regulatory expectations.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559685":0,"335559738":240,"335559739":240}"> </span></p>
<p><strong><span data-contrast="auto">Key responsibilities</span></strong><span data-ccp-props="{"134233117":false,"134233118":false,"335559685":0,"335559738":240,"335559739":240}"> </span></p>
<ul>
<li><span data-contrast="auto">Assess the current cloud security posture across Form3 environments, identifying risks, control gaps and opportunities for improvement.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Design and implement scalable cloud security controls that improve the resilience and security of our cloud-native platform.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Enhance perimeter security controls across cloud infrastructure.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Strengthen CI/CD pipeline security through secure build processes, automated security testing, deployment governance and artefact integrity.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Improve production access security, including RBAC, least-privilege implementation, deployment tooling and operational processes.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Enhance software supply chain security through dependency management, container image scanning, provenance, signing and vulnerability remediation.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Contribute to the secure adoption and governance of AI-enabled engineering capabilities, including controls for data protection, auditability and operational resilience.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Provide technical leadership and guidance on cloud security architecture and secure engineering practices.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Produce high-quality technical documentation, including solution designs, implementation plans, operational procedures and security evidence.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Collaborate closely with engineering, platform and security teams to deliver maintainable, production-ready security improvements.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Ensure all deliverables align with operational resilience requirements, regulatory obligations and internal security standards.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Deliver changes using structured, low-risk change management practices while maintaining service availability.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
</ul>
<p><span data-ccp-props="{"201341983":0,"335559739":160,"335559740":276}"> </span></p>
<p><strong><span data-contrast="none">WE’RE LOOKING FOR </span></strong><span data-contrast="none">🔍</span><span data-ccp-props="{"201341983":0,"335559739":160,"335559740":276}"> </span></p>
<p><strong><span data-contrast="none">Essential</span></strong><span data-ccp-props="{"201341983":0,"335559685":0,"335559739":160,"335559740":276}"> </span></p>
<ul>
<li><span data-contrast="auto">Extensive experience designing and implementing cloud security solutions within large-scale cloud-native environments.</span><span data-ccp-props="{"201341983":0,"335559739":160,"335559740":276}"> </span></li>
<li><span data-contrast="auto">Strong hands-on experience securing public cloud platforms (AWS preferred).</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Expertise in cloud security architecture, identity and access management, workload protection and infrastructure security.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Experience securing CI/CD pipelines and modern software delivery practices.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Strong understanding of software supply chain security, including dependency management, artefact signing, provenance and vulnerability management.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Experience implementing least-privilege access models and RBAC.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Knowledge of security monitoring, risk assessment and security governance.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Experience working within highly regulated or business-critical production environments.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Excellent stakeholder management and communication skills, with the ability to influence engineering teams.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
<li><span data-contrast="auto">Strong technical documentation and design skills.</span><span data-ccp-props="{"134233117":false,"134233118":false,"335559738":0,"335559739":0}"> </span></li>
</ul>
<p><span data-ccp-props="{"201341983":0,"335559685":0,"335559739":160,"335559740":276}"> </span></p>
<p><strong><span data-contrast="none">Desirable</span></strong><sp
Requirements
- Defensive Security