Principal Cloud Platform Engineer, London Stock Exchange

• At least 5+ years focused on AWS cloud security in a hands-on capacity
• Deep expertise in a wide range of AWS security services and their application in enterprise environments
• Proven experience with Infrastructure as Code (IaC) tools such as Terraform
• Strong proficiency in scripting languages (e.g., Python, Bash) for automation and security tool development
• Extensive experience with AWS Identity and Access Management (IAM) principles and implementation
• Solid understanding of network security concepts (firewalls, IDS/IPS, VPNs, WAF) within the AWS ecosystem
• Experience with security information and event management (SIEM) tools and security orchestration, automation, and response (SOAR) platforms
• Familiarity with compliance frameworks such as SOC 2, HIPAA, PCI DSS, GDPR, or ISO 27001
• Excellent problem-solving, analytical, and communication skills
• Ability to work independently and collaboratively in a fast-paced environment
• Strong desire to remain hands-on with technology and actively contribute to technical solutions

Desirable

• You will be a highly experienced and hands-on Principal AWS Platform Engineer to join our dynamic Cloud Engineering security team
• In this critical role, you will be a technical leader responsible for designing, implementing, and maintaining robust security solutions across our entire AWS cloud landing zone
• You will drive security best practices, mentor junior engineers, and directly contribute to the secure delivery of our products and services
• This is a hands-on role where you will be expected to write code, configure security tools, and work closely with cloud architects, platform and security engineers
• Architect and Design: Lead or contribute to the design and implementation of secure AWS architectures, ensuring adherence to security best practices, industry standards (e.g., NIST, ISO 27001), and regulatory requirements
• Implementation & Automation: Develop, deploy, and maintain automated security controls and infrastructure as code (IaC) using tools like CloudFormation, Terraform, or AWS CDK
• Security Tooling: Select, implement, and optimize a wide range of AWS security services (e.g., GuardDuty, Security Hub, Inspector, WAF, KMS, Macie, Config, Organizations) and third-party security tools
• Vulnerability Management: Establish and mature vulnerability scanning, penetration testing, and remediation processes for AWS environments and applications
• Identity & Access Management (IAM): Design and enforce robust IAM policies, roles, and permissions across AWS accounts and applications, adhering to the principle of least privilege
• Network Security: Securely configure AWS networking components (VPCs, Security Groups, NACLs, Transit Gateways) and integrate with network security solutions
• Data Protection: Implement and enforce data encryption at rest and in transit and establish data loss prevention (DLP) strategies within AWS
• Compliance & Audit: Ensure AWS environments are compliant with relevant industry regulations and internal security policies. Support internal and external audits
• Mentorship & Leadership: Provide technical leadership, guidance, and mentorship to junior security engineers and development teams on AWS security best practices
• Security Culture: Champion a strong security culture across the organization, promoting secure development practices and raising security awareness
• Research & Innovation: Stay abreast of emerging AWS security threats, vulnerabilities, and technologies, recommending and implementing innovative solutions