Senior Cloud & Security Engineer

Company: GOSH Charity
Location: London, England
Type: hybrid
Posted: Nov 6, 2026
Views: 2
Are you an experienced Cloud and Security Engineer with a passion for platform engineering, cloud-native architecture and building secure, scalable infrastructure?

This is an exciting opportunity for a Senior Cloud and Security Engineer to help shape and evolve Great Ormond Street Hospital Children's Charity's cloud platform, playing a key role in our cloud-first transformation and Cyber Security Programme.

Working closely with the Cloud and Security Lead, you'll take technical ownership of complex platform engineering initiatives, designing and delivering secure, resilient and cost-effective cloud infrastructure. You'll help establish reusable infrastructure components, automation and engineering standards that enable teams to deploy and operate cloud services securely and efficiently.

Salary
The salary for this position is £68,000 per annum, and we operate a hybrid working policy requiring a minimum of 2 days per week in the office.

In line with our EDI strategy and Total Reward policy, we calculate our salaries based on benchmarking data across the charity sector. To ensure fairness for existing staff and new joiners, we do not offer salaries above the advertised rate.
  • Cloud Platform Engineering: Lead the design, implementation and continuous improvement of secure, scalable cloud infrastructure and platform services across AWS and Azure, ensuring alignment with agreed architectural and security standards.
  • Platform Architecture: Independently assess technical requirements, evaluate architectural options and deliver cloud-native solutions that balance security, resilience, operational maintainability and cost.
  • Infrastructure as Code: Design, develop and maintain reusable Terraform modules, infrastructure components and standardised deployment patterns to enable consistent and secure infrastructure provisioning.
  • DevSecOps and CI/CD: Design, build and optimise CI/CD pipelines, integrating automated security controls, infrastructure validation and deployment practices across cloud environments.
  • Cloud Security: Implement and maintain security controls across cloud platforms and workloads, including identity and access management, network security, data protection, monitoring and compliance.
  • Platform Automation: Develop automation and tooling to streamline infrastructure management, improve reliability, reduce manual intervention and address technical debt.
  • Technical Ownership: Independently deliver assigned platform engineering initiatives from discovery and technical design through implementation, validation and operational handover, coordinating dependencies with internal teams and external suppliers.
  • Security and Risk Management: Conduct technical risk assessments, support threat modelling and incident investigations, and translate security frameworks and compliance requirements into practical engineering controls.
  • Technical Leadership: Provide technical guidance, review engineering solutions and mentor other engineers, promoting reusable patterns, secure engineering practices and continuous improvement.
  • Platform Operations: Support the ongoing reliability, observability, performance and cost optimisation of cloud infrastructure, contributing to the evolution of the Charity's cloud-first operating model.
We're looking for a technically strong, hands-on engineer with experience designing, building and operating secure cloud platforms, and the ability to independently deliver complex infrastructure solutions.

Essential Experience and Skills
  • Strong hands-on experience with AWS cloud services, architecture and security controls, including designing and operating secure cloud infrastructure.
  • Experience designing and implementing cloud-native architectures, with a strong understanding of scalability, resilience, availability and cost optimisation.
  • Extensive practical experience with Infrastructure as Code, particularly Terraform or AWS CloudFormation, including developing reusable infrastructure components and modules.
  • Experience designing, implementing and maintaining CI/CD pipelines using platforms such as GitLab or GitHub, incorporating automated infrastructure deployments and security controls.
  • Strong knowledge of AWS networking, including VPCs, routing, NAT gateways, private endpoints, connectivity and network security.
  • Experience implementing DevOps and DevSecOps practices, integrating security and compliance controls into infrastructure delivery.
  • Experience building, deploying and managing containerised infrastructure using technologies such as Docker.
  • Experience developing automation and tooling using scripting languages such as Bash or PowerShell.
  • Experience administering and securing Linux or Windows operating systems.
  • Knowledge of cloud security principles and industry frameworks, including CIS, NIST and ISO, and experience translating requirements into practical technical controls.
  • Experience conducting technical risk assessments, identifying vulnerabilities and recommending proportionate security improvements.
  • Strong technical judgement and problem-solving skills, with the ability to independently assess requirements, evaluate solutions and deliver complex engineering work.
  • Excellent communication and collaboration skills, with the ability to work across engineering teams, engage technical suppliers and explain architectural decisions to stakeholders.
Desirable Experience and Skills
  • Experience developing reusable platform services, standardised deployment patterns and self-service infrastructure capabilities.
  • Experience implementing cloud observability, monitoring and operational resilience practices.
  • Experience communicating technical risks, architectural trade-offs and recommendations to senior non-technical stakeholders.
  • Experience using programming languages such as Python, Java or C++.
  • Hands-on experience with security assessment tools, vulnerability management and penetration testing methodologies.
  • Understanding of regulatory and compliance requirements such as GDPR, PCI DSS and SOC 2.
  • Industry-recognised cloud or security certifications, such as AWS Certified Solutions Architect.
DBS - note a basic DBS check is required for this role.

How to apply
Please click on the apply button in the top right-hand corner where you will be taken to a short application form to complete.
Closing Date: 13th November 2026

Applications will be reviewed on an on-going basis and we reserve the right to close the role prior to the closing date, should a suitable applicant be found. Therefore, you are encouraged to apply right away, to avoid disappointment.
  • 30 days annual leave (plus bank holidays)
  • A flexible approach to working arrangements.
  • Access to our enhanced pension scheme
  • Life assurance
  • Access to various health and wellbeing schemes, including the employee assistance programme.

#LI-HM1
Apply Now ♡ Save Job

About the Company

Name: GOSH Charity
Location: London, UK
Website: https://www.gosh.org

We are Great Ormond Street Hospital Charity (GOSH Charity). We stop at nothing to help give seriously ill children the best chance and the best childhood possible.

For the children from all over the UK who are treated by Great Ormond Street Hospital (GOSH) every day. For children with rare or complex illnesses everywhere. For this generation and all those to come. Because we believe no childhood should be lost to serious illness. We support the hospital by funding groundbreaking research, cutting-edge medical equipment, child-centred facilities and life-changing support.

Whether you’re a fundraiser, tech professional or marketer looking for your next role, or you’re looking to make the move into the charity sector, at GOSH Charity you will be able to use your skills to help transform childhood for seriously ill children.

View Company Profile

More jobs at GOSH Charity