Central London, London, United Kingdom Hybrid / WFH Options
Halian Technology Limited
application security across engineering teamsproviding hands-on guidance, resolving concerns, and fostering a security-first mindset. DevSecOps Enablement : Promote and implement secure development practices across CI/CD pipelines, secrets and key management, dependency management, and secure design. Vulnerability Management : Lead vulnerability remediation effortstriaging findings, prioritizing risks, and partnering with teams to deliver effective, pragmatic fixes. … Tooling & Automation : Integrate security tools (e.g., SAST, DAST, SCA, secrets scanning) into developer workflows, ensuring automation is both scalable and developer-friendly. Cloud Security Collaboration : Work alongside infrastructure teams to ensure secure configuration of AWS and Azure environments, with a focus on IAM, network security, encryption, and observability. Architecture & Design Reviews : Provide input and recommendations to ensure new services … focus. Hands-on experience with secure CI/CD practices, DevSecOps methodologies, GitHub workflows, and Terraform. Deep understanding of cloud security principles in AWS and Azure, particularly around IAM, secretsmanagement, and networking. Proficient in secure coding practices, threat modeling, and vulnerability remediation. Familiar with a range of security tooling including static and dynamic analysis, software composition analysis More ❯
ensure high availability, security, and performance Managing service observability and reliability, including logging, metrics and alerting (we use Prometheus and Grafana) Handling database and service upgrades (e.g. MySQL, Kubernetes), secretsmanagement and security best practices Taking ownership of platform-level concerns such as deployment pipelines, configuration management, and cost awareness Helping drive pragmatic AI utilisation across our … including deploying to production Strong fundamentals of Java or Kotlin development practices A good grasp of principles behind building reliable and scalable systems, including redundancy, time complexity, and memory management Hands-on experience with cloud infrastructure and container orchestration, ideally with Kubernetes on GCP, and a strong understanding of platform reliability, cost awareness, and secure configuration Solid understanding of … security best practices across infrastructure and applications, including secretsmanagement and credential rotation. Familiarity with infrastructure-as-code or automation tools is a plus Experience with observability tools (such as Prometheus and Grafana), service monitoring, and debugging in production environments A demonstrated interest in staying up-to-date with new technology, new frameworks, new languages and other developments More ❯
standardizing environments and streamlining workflows. Security & Compliance Partner closely with the ISO and Security teams to maintain compliance with ISO 27001, SOC 2, and GDPR. Implement identity and access management, secretsmanagement, and network security best practices. Drive a security-first culture across platform and product teams. Mentorship & Leadership Act as a technical mentor and coach, fostering More ❯
City of London, London, United Kingdom Hybrid / WFH Options
Entasis Partners
other sectors Location: London (Hybrid – Client Site & Home) In today’s cloud-first world, it’s not just people who need identities. Applications, microservices, APIs, containers all have credentials, secrets, and keys that must be secured. We’re looking for a Non-Human Identity Manager who can connect the dots between Identity & Access Management (IAM), Privileged Access Management … solutions, this role is for you. What You’ll Do as a Non-Human Identity Manager Design & Architect: Shape secure, scalable strategies for managing service accounts, application credentials, and secrets across hybrid environments (cloud + on-prem). Define the Rules: Help clients establish policies and lifecycle controls for non-human identities. Automate Security: Implement and integrate tools like … HashiCorp Vault, CyberArk Conjur, AWS Secrets Manager, or Azure Key Vault into CI/CD workflows. Ensure Compliance: Build solutions that meet audit, regulatory, and internal security requirements. Collaborate Across Worlds: Translate IAM/PAM principles into DevOps-friendly processes, working with developers, cloud engineers, and security teams. What We’re Looking For in a Non-Human Identity Manager More ❯
other sectors Location: London (Hybrid – Client Site & Home) In today’s cloud-first world, it’s not just people who need identities. Applications, microservices, APIs, containers all have credentials, secrets, and keys that must be secured. We’re looking for a Non-Human Identity Manager who can connect the dots between Identity & Access Management (IAM), Privileged Access Management … solutions, this role is for you. What You’ll Do as a Non-Human Identity Manager Design & Architect: Shape secure, scalable strategies for managing service accounts, application credentials, and secrets across hybrid environments (cloud + on-prem). Define the Rules: Help clients establish policies and lifecycle controls for non-human identities. Automate Security: Implement and integrate tools like … HashiCorp Vault, CyberArk Conjur, AWS Secrets Manager, or Azure Key Vault into CI/CD workflows. Ensure Compliance: Build solutions that meet audit, regulatory, and internal security requirements. Collaborate Across Worlds: Translate IAM/PAM principles into DevOps-friendly processes, working with developers, cloud engineers, and security teams. What We’re Looking For in a Non-Human Identity Manager More ❯
OpenShift), CI/CD pipelines, and infrastructure as code (Terraform) Security integration experience across the DevSecOps lifecycle, including: SAST, DAST, SCA, and IAST tools (e.g., Checkmarx, Veracode, OWASP ZAP) Secretsmanagement tools like HashiCorp Vault Vulnerability management solutions such as Prisma Cloud Testing frameworks like Selenium Familiarity with JIRA, Confluence, and GitLab/Jenkins-based CI/ More ❯
AKS), Terraform, Azure DevOps. Develop, deploy, and manage containerized applications using AKS. Ensure high availability and scalability of microservices. Implement best practices for container orchestration and monitoring. Implement automated secretsmanagement workflows. Design and maintain CI/CD pipelines using Azure DevOps. Automate testing, building, and deployment processes. Integrate with other tools and services for seamless workflows. Develop More ❯
can make complex simple If you want to build the cloud backbone of tomorrow's AI products, get in touch for more info. Keywords - EC2, S3, RDS, Lambda, Bedrock, Secrets Manager, CloudFront Elastic Kubernetes Service (EKS), AWS Glue, Simple Notification Service (SNS), CloudWatch AWS Solutions Architect - AI Startup Oscar Associates (UK) Limited is acting as an Employment Agency in More ❯
can make complex simple If you want to build the cloud backbone of tomorrow's AI products, get in touch for more info. Keywords - EC2, S3, RDS, Lambda, Bedrock, Secrets Manager, CloudFrontElastic Kubernetes Service (EKS), AWS Glue, Simple Notification Service (SNS), CloudWatch AWS Solutions Architect - AI Startup Oscar Associates (UK) Limited is acting as an Employment Agency in relation More ❯
a talented Platform Engineer to join their remote team and help shape the future of their pioneering platform. The successful candidate will be expected to: Lead the deployment and management of infrastructure and applications using ArgoCD, applying GitOps best practices. Manage and improve the deployment of shared platform services across Kubernetes clusters. Collaborate with cross-functional teams to design … and application teams. Undertake additional activities and responsibilities as required. Essential Skills Deep experience in DevOps, automation, and infrastructure as code. Proficiency in Git and GitOps methodologies. Expertise in secretsmanagement tools (e.g., HashiCorp Vault). Practical experience with cloud services (AWS, Azure, or GCP). Strong knowledge of Kubernetes, especially in production environments. Excellent written and verbal More ❯
a talented Platform Engineer to join their remote team and help shape the future of their pioneering platform. The successful candidate will be expected to: Lead the deployment and management of infrastructure and applications using ArgoCD, applying GitOps best practices. Manage and improve the deployment of shared platform services across Kubernetes clusters. Collaborate with cross-functional teams to design … and application teams. Undertake additional activities and responsibilities as required. Essential Skills Deep experience in DevOps, automation, and infrastructure as code. Proficiency in Git and GitOps methodologies. Expertise in secretsmanagement tools (e.g., HashiCorp Vault). Practical experience with cloud services (AWS, Azure, or GCP). Strong knowledge of Kubernetes, especially in production environments. Excellent written and verbal More ❯
blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the … requirements, and user experience expectations. Champion DevSecOps practices to embed security early into development and delivery workflows. Security Platform Engineering: Lead end-to-end engineering for identity and access management (IAM), including authentication, authorization, and privileged access controls. Oversee endpoint security architecture and enforcement, ensuring comprehensive coverage for threat detection, malware prevention, and device compliance. Build and operate scalable … data protection solutions, including data loss prevention (DLP), secretsmanagement, encryption, and classification. Integrate security controls into CI/CD pipelines, cloud-native services, and on-prem platforms to enforce security-by-design principles. Deliver security capabilities that support modern work scenarios, remote access, zero-trust networking, and AI/ML workloads. Leverage automation frameworks and IaC to More ❯
blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the … experience expectations. Champion DevSecOps practices to embed security early into development and delivery workflows. Data Security Engineering: Build and operate scalable data protection solutions, including data loss prevention (DLP), secretsmanagement, encryption, and classification. Collaborate with the IAM team to align authentication, authorization, and privileged access policies with data security controls. Deliver security capabilities that support modern work … Apply SRE principles to improve reliability, performance, and maintainability of security services. Define service level objectives (SLOs) and key performance indicators (KPIs) for all security services. Compliance, Governance & Risk Management: Ensure alignment with global compliance requirements such as ISO 27001, NIST, SOC 2, GDPR, and others. Partner with governance, legal, and ISRM teams to implement enforceable policies and standards More ❯
practices, automation, and container orchestration. You will be instrumental in shaping enterprise-ready cloud solutions by applying deep technical expertise in AWS alongside knowledge of multi-cloud environments, identity management, observability, and cost optimisation. Key Responsibilities Design and implement secure, scalable AWS cloud architectures Drive Infrastructure as Code (IaC) adoption using Terraform and CloudFormation Build, optimise, and automate CI … CD pipelines with Jenkins, GitHub Actions, and related tools Deploy and manage containerised solutions with Docker, Kubernetes, and Helm Implement strong security and access controls using IAM, Vault, and Secrets Manager Enhance platform observability using Prometheus, Grafana, and ELK Stack Collaborate with cross-functional teams to deliver robust, high-availability solutions Key Skills & Experience Extensive hands-on experience with More ❯
practices, automation, and container orchestration. You will be instrumental in shaping enterprise-ready cloud solutions by applying deep technical expertise in AWS alongside knowledge of multi-cloud environments, identity management, observability, and cost optimisation. Key Responsibilities Design and implement secure, scalable AWS cloud architectures Drive Infrastructure as Code (IaC) adoption using Terraform and CloudFormation Build, optimise, and automate CI … CD pipelines with Jenkins, GitHub Actions, and related tools Deploy and manage containerised solutions with Docker, Kubernetes, and Helm Implement strong security and access controls using IAM, Vault, and Secrets Manager Enhance platform observability using Prometheus, Grafana, and ELK Stack Collaborate with cross-functional teams to deliver robust, high-availability solutions Key Skills & Experience Extensive hands-on experience with More ❯
practices, automation, and container orchestration. You will be instrumental in shaping enterprise-ready cloud solutions by applying deep technical expertise in AWS alongside knowledge of multi-cloud environments, identity management, observability, and cost optimisation. Key Responsibilities Design and implement secure, scalable AWS cloud architectures Drive Infrastructure as Code (IaC) adoption using Terraform and CloudFormation Build, optimise, and automate CI … CD pipelines with Jenkins, GitHub Actions, and related tools Deploy and manage containerised solutions with Docker, Kubernetes, and Helm Implement strong security and access controls using IAM, Vault, and Secrets Manager Enhance platform observability using Prometheus, Grafana, and ELK Stack Collaborate with cross-functional teams to deliver robust, high-availability solutions Key Skills & Experience Extensive hands-on experience with More ❯
london (city of london), south east england, united kingdom
Damia Group
practices, automation, and container orchestration. You will be instrumental in shaping enterprise-ready cloud solutions by applying deep technical expertise in AWS alongside knowledge of multi-cloud environments, identity management, observability, and cost optimisation. Key Responsibilities Design and implement secure, scalable AWS cloud architectures Drive Infrastructure as Code (IaC) adoption using Terraform and CloudFormation Build, optimise, and automate CI … CD pipelines with Jenkins, GitHub Actions, and related tools Deploy and manage containerised solutions with Docker, Kubernetes, and Helm Implement strong security and access controls using IAM, Vault, and Secrets Manager Enhance platform observability using Prometheus, Grafana, and ELK Stack Collaborate with cross-functional teams to deliver robust, high-availability solutions Key Skills & Experience Extensive hands-on experience with More ❯
/CD pipelines with GitLab CI/CD, Jenkins, and ArgoCD Embed security scanning and compliance tools (Snyk, Trivy, Checkov, SonarQube) into automated workflows Manage authentication, access control, and secrets using Vault, AWS Secrets Manager, OAuth2.0, and Zero Trust principles Monitor environments with ELK Stack, Splunk, and Prometheus to ensure visibility, auditing, and compliance Collaborate with engineering, operations … Strong background in cloud platforms, particularly AWS and Kubernetes (OpenShift experience advantageous) Proven expertise in IaC, automation, and modern CI/CD practices Deep knowledge of application security, access management, and Zero Trust Networking Hands-on experience with vulnerability scanning, policy-as-code, and automated compliance tooling Proficiency in building secure, reliable, and scalable pipelines and platforms Excellent collaboration More ❯
/CD pipelines with GitLab CI/CD, Jenkins, and ArgoCD Embed security scanning and compliance tools (Snyk, Trivy, Checkov, SonarQube) into automated workflows Manage authentication, access control, and secrets using Vault, AWS Secrets Manager, OAuth2.0, and Zero Trust principles Monitor environments with ELK Stack, Splunk, and Prometheus to ensure visibility, auditing, and compliance Collaborate with engineering, operations … Strong background in cloud platforms, particularly AWS and Kubernetes (OpenShift experience advantageous) Proven expertise in IaC, automation, and modern CI/CD practices Deep knowledge of application security, access management, and Zero Trust Networking Hands-on experience with vulnerability scanning, policy-as-code, and automated compliance tooling Proficiency in building secure, reliable, and scalable pipelines and platforms Excellent collaboration More ❯
/CD pipelines with GitLab CI/CD, Jenkins, and ArgoCD Embed security scanning and compliance tools (Snyk, Trivy, Checkov, SonarQube) into automated workflows Manage authentication, access control, and secrets using Vault, AWS Secrets Manager, OAuth2.0, and Zero Trust principles Monitor environments with ELK Stack, Splunk, and Prometheus to ensure visibility, auditing, and compliance Collaborate with engineering, operations … Strong background in cloud platforms, particularly AWS and Kubernetes (OpenShift experience advantageous) Proven expertise in IaC, automation, and modern CI/CD practices Deep knowledge of application security, access management, and Zero Trust Networking Hands-on experience with vulnerability scanning, policy-as-code, and automated compliance tooling Proficiency in building secure, reliable, and scalable pipelines and platforms Excellent collaboration More ❯
london (city of london), south east england, united kingdom
Damia Group
/CD pipelines with GitLab CI/CD, Jenkins, and ArgoCD Embed security scanning and compliance tools (Snyk, Trivy, Checkov, SonarQube) into automated workflows Manage authentication, access control, and secrets using Vault, AWS Secrets Manager, OAuth2.0, and Zero Trust principles Monitor environments with ELK Stack, Splunk, and Prometheus to ensure visibility, auditing, and compliance Collaborate with engineering, operations … Strong background in cloud platforms, particularly AWS and Kubernetes (OpenShift experience advantageous) Proven expertise in IaC, automation, and modern CI/CD practices Deep knowledge of application security, access management, and Zero Trust Networking Hands-on experience with vulnerability scanning, policy-as-code, and automated compliance tooling Proficiency in building secure, reliable, and scalable pipelines and platforms Excellent collaboration More ❯
culture is at the heart of what we do.To be successful in this role you should have:Experience across configuration and integration with Hardware Security Module (HSM) and AWS Secrets Manager (ASM) tooling, certificate lifecycle management, e.g. rotation, revocation, and in automating security workflowsExperience using GitLab CI/CD pipelines, AWS CLI or Chef.Strong experience with Cloud Security … expertise across the following areas: AWS security controls, policies and automation, CLI tools, role based and attribute-based access controls, cryptographic protocols and secure key lifecycle management, advanced threat modelling, SOC operations, securing microservices and APIs, DevSecOps best practices, vulnerability scanning, tools, approaches, vulnerability patching and vendor management for securityStrong experience in penetration testing and hands-on coding … information. AccountabilitiesProvision of subject matter expertise on security systems and engineering patterns.Development and implementation of protocols, algorithms, and software applications to protect sensitive data and systems.Management and protection of secrets, ensuring that they are securely generated, stored, and used.Execution of audits to monitor, identify and assess vulnerabilities in the banks infrastructure/software and support the response to potential More ❯
defaults across our platform so researchers can build quickly and safely Build provenance and integrity into the software supply chain (signing, attestation, artefact verification, reproducibility) Support strengthened identity, segmentation, secrets, and key management to create a defensible foundation for evaluations at scale Develop automated, evidence driven assurance mapped to relevant standards, reducing audit toil and improving signal Create More ❯
