Overview
The DevOps Engineer will engage with a leading digital consumer brand to ensure compliance with the CAF 4 framework, focusing on hands-on cloud security remediation and documentation primarily in AWS, with some involvement in GCP. This role necessitates close collaboration with internal teams and third-party suppliers, while providing regular updates to senior stakeholders about progress and compliance status.
Responsibilities
- Assess current security controls and identify necessary remediation to meet CAF 4 compliance objectives.
- Implement changes across AWS infrastructure, including IAM, MFA, and network segmentation.
- Produce clear, audit-ready documentation and evidence to support compliance outcomes.
- Collaborate with internal teams and third-party suppliers to validate shared security responsibilities.
- Provide weekly progress updates to senior stakeholders, highlighting risks and delivery status.
- Focus on access control, data protection, and incident recovery solutions.
Requirements
- Strong hands-on experience securing AWS environments; knowledge of GCP is beneficial.
- Experience delivering against cyber security and compliance frameworks such as CAF, NIS, or ISO 27001.
- Solid understanding of IAM, MFA, logging, monitoring, backup, and network segmentation.
- Experience producing technical and compliance documentation for senior stakeholders.
- Ability to operate effectively in a fast-paced delivery environment.
- Strong communication skills for stakeholder engagement.