Overview
The Platform Engineer will play a critical role in supporting a prominent UK digital consumer brand in achieving compliance with the CAF 4 framework. This hybrid position involves hands-on cloud security remediation in AWS environments, alongside compliance documentation and stakeholder engagement, particularly focusing on security controls and risk management. The contractor will collaborate with internal teams and third-party vendors to ensure streamlined operations and effective compliance reporting.
Responsibilities
- Assess current security controls and identify necessary remediation for CAF 4 compliance.
- Implement changes in AWS infrastructure and, when needed, in GCP, focusing on various security measures.
- Produce clear, audit-ready documentation to support compliance outcomes.
- Collaborate with internal teams and third-party suppliers to validate security responsibilities.
- Provide weekly updates to senior stakeholders on progress, risks, and blockers.
- Focus on supply chain risk, access control, centralised logging, and incident recovery strategies.
Requirements
- Strong hands-on experience securing AWS environments with working knowledge of GCP.
- Experience delivering against cybersecurity and compliance frameworks such as CAF, NIS, or ISO 27001.
- Solid understanding of IAM, MFA, logging, monitoring, backup, and network segmentation.
- Proficiency in producing technical and compliance documentation for senior stakeholders.
- Ability to operate effectively in a fast-paced delivery environment.