Senior Cloud Security Engineer - AI Resilience & Security Enhancements (Contract)

About this role

THE PROJECT 📝 We're looking for an experienced Senior Cloud Security Engineer to join Form3 on a contract basis to deliver a strategic programme of security enhancements across our cloud-native payments platform. Focusing on improving cloud security, operational resilience and governance across our engineering ecosystem, you will work closely with our Platform Engineering and Security teams to design and implement practical security improvements that enhance how we build, deploy and operate critical payment infrastructure.

You'll play a key role in strengthening areas such as cloud platform security, software supply chain security, identity and access management, AI governance, cryptographic controls and automated security assurance, ensuring solutions are scalable, production-ready and aligned with regulatory expectations. Key responsibilities Assess the current cloud security posture across Form3 environments, identifying risks, control gaps and opportunities for improvement.

Design and implement scalable cloud security controls that improve the resilience and security of our cloud-native platform. Enhance perimeter security controls across cloud infrastructure. Strengthen CI/CD pipeline security through secure build processes, automated security testing, deployment governance and artefact integrity. Improve production access security, including RBAC, least-privilege implementation, deployment tooling and operational processes.

Enhance software supply chain security through dependency management, container image scanning, provenance, signing and vulnerability remediation. Contribute to the secure adoption and governance of AI-enabled engineering capabilities, including controls for data protection, auditability and operational resilience. Provide technical leadership and guidance on cloud security architecture and secure engineering practices.

Produce high-quality technical documentation, including solution designs, implementation plans, operational procedures and security evidence. Collaborate closely with engineering, platform and security teams to deliver maintainable, production-ready security improvements. Ensure all deliverables align with operational resilience requirements, regulatory obligations and internal security standards. Deliver changes using structured, low-risk change management practices while maintaining service availability.