Lead Security Cloud Enginer

Location: London, Potters Bar, Bristol or Isle of Man (Hybrid working options available)

Canada Life UK looks after the retirement, investment and protection needs of individuals, families and companies. We help to build better futures for our customers, our intermediaries and our employees by operating as a modern, agile and welcoming organisation.
Part of our parent company Great-West Lifeco, Canada Life UK has operated in the United Kingdom since 1903. We have hundreds of respected and supported employees committed to doing the right thing for our customers and colleagues.
Canada Life UK is transforming to create a more customer-focused business by providing our customers with expertise on financial and tax planning, offering home finance and annuities propositions, and providing collective fund solutions to third party customers.
Job Summary
We are seeking a Lead Security Cloud Engineer with strong DevSecOps skills to join our team. The successful candidate will be a part of the product team responsible for ensuring Canada Life UKs Cloud Platform is best in class!

As a member of the Cloud Platform team, you will be involved in every stage of product lifecycle of the platform from conception, design, implementation, testing and through to operational support

applying a security focus at all points. Moreover, you will be looking at security across all products in our cloud estate.

With automation at the heart of everything we are doing, you should have a strong hands-on understanding of CI/CD tools, IaC, and the best ways to integrate Security into the product lifecycle.

We are looking for Azure experience, though strong experience in any cloud is welcome. CLUK are looking to move to multi-cloud setup soon.

Canada Life operates a Hybrid and Work from Home model

with the expectation of being in the office for meets and events. Office locations include Bristol (preferred), London, Isle of Man.

Responsibilities
Design, implement, and maintain cloud security on Azure using Bicep and CI/CD Pipelines.
Develop automation scripts for upkeep, detection, and remediation of cloud security.
Champion security best practices, such as zero-trust and Secured by Design, within the cloud platform team and across all CLUK product teams.
Troubleshoot and resolve issues related to cloud security infrastructure and applications.
Ensure compliance with security policies and standards across CLUK using guardrails.
Participate in technical discussions and provide recommendations for improvements.
Document system configurations and processes.
Provide support to other teams as needed.
Providing coaching and guidance for less experienced team members and across CLUK.
Providing automated reporting to stakeholders on security posture and issues
Work closely with our IT Risk & Security Function as well as the wider group Security Operations team to ensure alignment while advocating for cloud security best practices.
Requirements
Experience in cloud security engineering including network security.
Strong understanding of cloud, Azure, and related services
Experience with Bicep or other IaC deployments, with experience providing IaC as a service to developer teams.
Strong understanding of CI/CD pipeline security techniques and tools such AST, SCA, and SLSA. Experience implementing and working with Azure DevOps or GitHub Actions (or similar)

and the code scanning tools that can be used i.e., Veracode, CodeQL, PrismaCloud.
Strong understanding of Azure Defender for Cloud and Sentinel.
Understands Azure Policy and Policy-as-Code.
Strong scripting skills in PowerShell and/or Python.
Strong knowledge on data security best practices and tools i.e., Purview.
Knowledge of containerization technologies such as Docker and Kubernetes and how to secure them.
Excellent problem-solving and troubleshooting skills.
Effective communication and collaboration skills.
Ability to work independently and in a team environment.
Microsoft Azure certifications are a plus.
Benefits of working at Canada Life
We believe in recognising and rewarding our people, so we offer a competitive salary and benefits package thats regularly reviewed. As a Canada Life UK colleague, youll receive a competitive salary and comprehensive reward package including a generous pension and bonus scheme, along with, income protection, private medical insurance and life assurance. We have a fantastic number of other benefits and support services as well as regular personal and professional development.
How we work at Canada Life
Our culture is unique and incredibly important to us. We care about doing the right thing for our people, customers and community and helping others to build better futures. Our blueprint behaviours shape and influence how we work, and are central to the relationships we have with others. Every day we are encouraged to be more curious, own the outcome, face into things together and find a way forward.
We want colleagues to have rewarding careers with us so we invest in the development of our people, technology and workplaces. Thats why we offer a range of training, flexible working and opportunities to grow and develop.
Diversity and inclusion
Building an inclusive workplace with a diverse workforce where everyone can feel they belong and achieve their potential regardless of gender, ethnicity or any other characteristic is a key commitment for us. We are proud of the progress were making in DEI, and we continue for it to be a significant focus.
At Canada Life we believe in the power of great people from different backgrounds, experiences and perspectives coming together to build better futures. Emerging talent is crucial to our growth and creating an environment that continues to inspire us all. Nick Harding, Chief People Officer, Canada Life UK
We appreciate that everyone has different work and life responsibilities. Were happy to discuss flexible working arrangements, including part time, for any of our roles should this be a requirement for.