AWS Security Engineer

AWS Security Engineer 6 Month Contract Essex (Hybrid) 525/day (Inside IR35) AWS Security Engineer needed for a 6 Month Contract in Essex (Hybrid). Active SC Security Clearance preferred. Start asap in Jan/Feb 2026. Hybrid Working - 3-4 days/week remote (WFH), and 1-2 days/week working on-site from the office based in Grays (Essex). A chance to work with a leading global IT and Digital transformation business specialising in delivering large-scale Government projects. Key experience + tasks will include: Must have extensive AWS Cloud Security Engineering expertise. Key Objective: taking ownership of AWS Cloud Security across discovery, design, implementation + large-scale workload migration. The role sits at the centre of a major AWS transformation program including Landing Zone establishment, EUC/Citrix-to-WorkSpaces modernisation, and full datacentre migration. Shaping identity, compliance, guardrails, monitoring, MFA/Conditional Access, and ongoing hardening for production. Validating MFA, Conditional Access, encryption, logging in discovery phase. Designing + embedding IAM, RBAC, federation + authentication patterns into architectures. Defining AWS security guardrails, SCPs, monitoring + compliance baselines. Configuring IAM roles, key management, encryption, logging, CloudTrail, Config, GuardDuty + Security Hub. Supporting Landing Zone build-out including identity federation, tagging, audit + multi-account governance. Implementing VDI, WorkSpaces, Citrix security hardening, MFA, Conditional Access + admin console security. Validating security during pilot migration and bulk migration (200+ workloads) across IAM, MFA, encryption, BCP. Tuning monitoring dashboards, alerting + incident triage in hypercare. Technical Skills: IAM, RBAC, SCP, AWS Organizations, MFA, Conditional Access, Entra AD federation, CIS, compliance, encryption, KMS, RPO/RTO, enabling GuardDuty, Security Hub, CloudTrail, Config + migration security validation. TPBN1_UKTJ

Created: 2026-01-14