AWS Security Engineer
6 Month Contract
Essex (Hybrid)
£525/day (Inside IR35)
AWS Security Engineer needed for a 6 Month Contract in Essex (Hybrid). Active SC Security Clearance preferred. Start asap in Jan/Feb 2026.
Hybrid Working - 3-4 days/week remote (WFH), and 1-2 days/week working on-site from the office based in Grays (Essex).
A chance to work with a leading global IT and Digital transformation business specialising in delivering large-scale Government projects.
Key experience + tasks will include:
Must have extensive AWS Cloud Security Engineering expertise.
Key Objective: taking ownership of AWS Cloud Security across discovery, design, implementation + large-scale workload migration.
The role sits at the centre of a major AWS transformation program including Landing Zone establishment, EUC/Citrix-to-WorkSpaces modernisation, and full datacentre migration.
Shaping identity, compliance, guardrails, monitoring, MFA/Conditional Access, and ongoing hardening for production.
Validating MFA, Conditional Access, encryption, logging in discovery phase.
Designing + embedding IAM, RBAC, federation + authentication patterns into architectures.
Defining AWS security guardrails, SCPs, monitoring + compliance baselines.
Configuring IAM roles, key management, encryption, logging, CloudTrail, Config, GuardDuty + Security Hub.
Supporting Landing Zone build-out including identity federation, tagging, audit + multi-account governance.
Implementing VDI, WorkSpaces, Citrix security hardening, MFA, Conditional Access + admin console security.
Validating security during pilot migration and bulk migration (200+ workloads) across IAM, MFA, encryption, BCP.
Tuning monitoring dashboards, alerting + incident triage in hypercare.
Technical Skills: IAM, RBAC, SCP, AWS Organizations, MFA, Conditional Access, Entra AD federation, CIS, compliance, encryption, KMS, RPO/RTO, enabling GuardDuty, Security Hub, CloudTrail, Config + migration security validation