Senior Cloud Infrastructure Engineer (Security Focused)

Who We Are:

MetaCompliance is a global leader in personalised cyber security training, reducing risk by engaging employees with targeted Security Awareness Training and Human Risk Management that drives real behaviour change. We have a world class creative team in house, driving innovation with content creation to bring our users the very best learning experiences, live action drama and gamified training they love.

2025 is a defining year for us, and we’re looking for senior tech talent with the desire to play a meaningful role in shaping what comes next. With the backing of Keensight Capital, we’re entering a new era of global growth—scaling fast and building with intent. James Mackay, our CEO is bringing a clear, progressive vision to the business, rooted in deep industry insight that inspires innovation and excellence. Our strengthened leadership team brings deep expertise in technology, commercial growth, and high-impact scalability.

We’re building a world-class technology function grounded in modern engineering practices, continuous delivery and leveraging AI innovation, coupled with a game-changing product roadmap.

How we work matters just as much as what we’re building. We’re creating an environment where high-performing people can do their best work—backed by flexibility, trust, and a culture that values clarity, collaboration, and mutual respect. You’ll have the autonomy to lead, the support to grow, and the space to bring your ideas of “what good looks like” to life. If you want to do the most impactful work of your career, inspire results that really matter, alongside a team that values communication, collaboration, and progress, we’d love to hear from you!

Why We Are Hiring:

At MetaCompliance, As our engineering organisation grows, and our platform matures, we’re investing in the security and resilience foundations that make great software possible. We’re hiring a Senior Cloud Security Engineer with a strong security focus to play a key role in helping us scale safely, operate reliably, and deliver faster by improving the platform our teams build on every day.

You’ll play a key role in treating our platform as a product — designing and evolving it with the same care, clarity, and usability as customer-facing systems. That means implementing secure-by-default patterns, automating compliance, and embedding protection into our CI/CD pipelines so product teams can build and ship with confidence.

This role is about more than just keeping the lights on, its core to our mission to be a force multiplier for product engineering teams & fuel our ambition to become the European Leader in Human Risk Management. As a Tech4Good organisation, your work makes a tangible impact to keeping our customers and user safe from the ever increasing threat of cyber crime.

We’re looking for someone who sees security as a shared responsibility, infrastructure as an enabler of speed and safety, and platform engineering as a craft. If you’re equally comfortable hardening cloud environments, integrating security into pipelines, tuning observability, and guiding infrastructure strategy — this role is for you.

What We Are Looking For:

Responsibilities:

• Design, build, and maintain secure, scalable, resilient cloud infrastructure using infrastructure-as-code.
• Implement and manage cloud security controls, policies, and tooling — applying IAM, network segmentation, encryption, and secrets management best practices, and enforcing compliance through policy-as-code.
• Embed security considerations into architecture and design reviews to ensure solutions are secure by design.
• Conduct regular security assessments, audits, and vulnerability scans; implement corrective actions to improve posture.
• Build and maintain CI/CD pipelines, integrating automated compliance and security checks to drive vulnerability detection and prevention before release.
• Design and implement secure-by-default automation strategies and golden paths that enable developer self-service while reducing operational complexity.
• Enhance observability and monitoring to detect and resolve performance, availability, and security issues before they impact the platform.
• Partner with engineers, providing hands-on infrastructure support and mentorship to deliver robust, secure, and scalable product outcomes.
• Collaborate with security and engineering teams to assess threats, perform risk assessments, and ensure compliance with frameworks such as ISO 27001.
• Develop and maintain clear, auditable documentation for infrastructure, security configurations, incidents, and root cause analysis to support compliance requirements.
• Research and evaluate advancements in cloud and security technologies, identifying opportunities to evolve the platform and improve operational excellence.

Requirements:

• Proven experience in a senior Cloud, Infrastructure, SRE, or DevSecOps role delivering scalable, secure solutions in a complex environment.
• Deep experience with at least one major cloud provider (Azure, AWS, GCP).
• Strong experience implementing CI/CD pipelines and integrating security tooling for vulnerability scanning, compliance, and quality gates.
• Proficiency with infrastructure-as-code tools (e.g. Terraform, Pulumi, Bicep).
• Understanding of threat modelling, incident response in cloud environments, and secure architecture patterns.
• Proficient in security information and event management (SIEM) tools and incident response workflows.
• Solid knowledge of cloud networking and network infrastructure security, including firewalls, VPNs, IDS/IPS, and network segmentation.
• Experience implementing and managing observability solutions (e.g. New Relic, Datadog, AppInsights) to monitor performance, availability, and security.
• Skilled in one or more scripting languages (e.g. Bash, PowerShell, Python) for automation and remediation.
• Familiarity with compliance requirements for cloud environments and experience applying them in practice.
• Knowledge of relational databases (e.g. MSSQL, MySQL, PostgreSQL) and associated security considerations.
• Excellent communication skills – able to articulate design and security decisions to both technical and non-technical stakeholders.

Desired:

• Relevant cloud and security certifications (e.g. Azure, AWS, GCP, CISSP, CISM, CCSP, AZ-500).
• Azure-specific security expertise, including services such as Microsoft Defender for Cloud, Azure Policy, Entra ID, Key Vault, and network security features (NSGs, ASGs, DDoS Protection).
• Build and operation of container orchestration solutions, with knowledge of container security, IaC scanning, and secure configuration management.

Your Career with MetaCompliance

At the heart of our mission is a passion for delivering innovative cybersecurity solutions that empower organisations and create exceptional experiences for our customers. Guided by our five core values, we’ve built a culture that’s collaborative, forward-thinking, and driven by purpose. In 2024, we were proud to be recognised as a Certified™ Great Place to Work®, a reflection of the positive, inclusive, and supportive environment we’ve cultivated.

We offer an attractive compensation and full benefits package.

Our UK/ROI employees receive an initial 25-day annual leave allowance (which rises to 26 after 6-months & to 27 after 2 years), plus 10 bank holidays (In line with NI Bank holiday entitlement). We match up to 8% pension contribution, provide private medical insurance and enhanced maternity & paternity leave. Our technology roles offer flexible hybrid working options and we celebrate our success with two full company socials per year, gathering our full global team to celebrate together in style!

What truly sets us apart is our people. We believe that diverse perspectives, unique skills, and bold ideas are essential to our success. When you join our team, you’ll be part of a community that values your contributions and invests in your growth. From continuous learning opportunities to meaningful career development, we’re here to help you thrive—professionally and personally.

Statement on Fair Employment and Equal Opportunities:

MetaCompliance Ltd wishes to ensure equal opportunity is given to all job applicants. This company will not discriminate on the grounds of race, gender (including gender reassignment status), sexual orientation, religious belief, political opinion, marital status, age or disability.