214 jobs found

DevOps Engineer, GCP, AWS, Python, COR7336 This is an excellent opportunity for a junior-to-mid-level DevOps Engineer to join an established, innovative Medtech company, originally spun out of Oxford University. Working closely with the CTO, as part of a multi-disciplinary development team working to develop state-of-the-art medical imaging software, the DevOps Engineer will: Help to build and grow the automation coverage throughout the development lifecycle at all levels of the test pyramid Monitor and optimise system performance, availability, and security Troubleshoot and resolve issues across cloud, network, and Linux-based systems. Support hybrid infrastructure, including on-premises systems where needed Help maintain compliance with Cybersecurity and Quality standards The Company The DevOps Engineer will be joining an established Oxford-university spinout, paving the way in the diagnosis of disease. They are a company who are truly making a difference, with a growing number of bright-minded and talented members supporting in this vision. The DevOps Engineer will contribute to a supportive team environment, which rewards hard work and innovative thinking. The current work pattern in place is full-time on-site in the Oxford office. What's required to be successful in this DevOps Engineer role? Experience working with a major cloud provider (Google Cloud and/or AWS) Experience with Python Experience with Git (or similar) Practical experience of writing tests in a DevOps/CI setting Some experience with containerisation and orchestration (Docker, ECS, or EKS) An understanding of Linux system administration (Ubuntu, Amazon Linux, etc.) Any experience of working within one or more of: ISO 13485, 27001, 9001 would be advantageous The list above is important, but not as important as hiring the right person! So if you don't meet all of the criteria above, but feel the role is of interest, please apply or get in touch today to discuss further. So What's Next? If you are looking to build a career in DevOps and would enjoy being part of a dedicated team, with plenty of variety, challenge and development, then please apply now for immediate consideration! DevOps Engineer, GCP, AWS, Python Corriculo Ltd acts as an employment agency and an employment business. ,

A large, growing, private sector organisation, based in Guildford, are looking to recruit an IT Infrastructure Technician to support the on-prem systems into hybrid cloud environments. This is a permanent role with a requirement to be in the office 5 days a week in Guildford. Must hold a valid UK driver's license. The Role As the IT Infrastructure Technician, you will be working closely with the IT and wider teams across the organisation to support the on-prem systems/servers into hybrid cloud environments. You will be supporting in managing the IT infrastructure estate and provide hands-on assistance by responding to incidents and service requests promptly and professionally, including setup and deployment of hardware, software, and accounts. You will have experience across systems and infrastructure maintenance, day to day responsibilities might include monitoring, maintaining, and supporting servers, networks, storage, and cloud/hybrid environments to ensure stability, security, and business continuity. Someone who is self-motivated, proactive, and able to positively engage with end users while working both independently and as part of a team, will be successful in this position. You might also have experience as an Infrastructure Engineer. What you'll need to succeed Windows operating systems (desktop & server). Experience with Active Directory, Group Policy, DNS, and user account management. Hardware installation, configuration, and troubleshooting (servers, desktops, laptops, printers). Understanding of virtualization platforms (VMware, Hyper-V, or similar). Familiarity with networking concepts (LAN/WAN, TCP/IP, firewalls, VPNs, routing & switching). Knowledge of storage solutions, backup, and disaster recovery tools. IT service frameworks (e.g., ITIL) Hands-on experience administering and supporting Microsoft 365 platforms (Exchange Online, Teams, SharePoint, OneDrive) Understanding of cybersecurity best practices and principles (antivirus, patching, endpoint security). Experience working on IT projects (e.g. system upgrades, migrations, rollouts). Strong communication and collaboration skills, with the ability to engage positively across different teams and stakeholders. What you'll get in return Salary up to £55,000 Bonus scheme You will be based in the main IT department in Guildford Annual holidays at 36 days inclusive of public holidays (Christmas and Boxing Day fixed) Offer enhanced Parental leave after 52 weeks Bonus scheme Pension scheme matching up to 10% Private healthcare and dentalcare Life Assurance Ongoing training and personal development Plus many other added staff benefits. What you need to do now If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call/email Sophia Redpath now. Email: If this job isn't quite right for you but you are looking for a new position, please contact us for a confidential discussion on your career. Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk

Azure DevOps Engineer (IaC, Terraform) - 12mth FTC - c70-75k +Bens-1 day/month in office The Chaucer Group is a leading insurance group who help protect industries around the world from the risks they face. With UK headquarters in London, we also have international offices in Bermuda, Copenhagen, Dubai, and Singapore, and have doubled in size over the last four years. We are going through a really exciting Digital Transformation Programme and as part of this we are migrating 2 large Datacentres to Azure. We are now looking for a strong Azure DevOps Engineer (IaC, Terraform) to join the team and perform a pivitol role in the continuing Cloud Adoption. As our new Azure DevOps Engineer (IaC, Terraform) you will be responsible for designing and implementing Cloud infrastructure solutions using IaC (infrastructure as Code). On a daily basis our new Azure DevOps Engineer (IaC, Terraform) will be responsible for: Design and implement cloud infrastructure solutions using IaC delivery methods within Azure. Automate deployment, scaling and management; Use infrastructure-as-code (Terraform & Azure DevOps) to automate the deployment, scaling, and management of cloud infrastructure Developing standards and best practice around DevSecOps deployments particularly in respect of IaC using Terraform Ensure the security and compliance of cloud infrastructure by aligning with the Cloud Adoption framework and security governance As our new Azure DevOps Engineer (IaC, Terraform) you should have a proven similar career background. You should have extensive knowledge of Infrastructure as Code (IaC), Terraform and DevOps. You should also have knowledge of Azure Platform services inc Compute infrastructure, Storage, Networking, Azure policy. This is a fantastic opportunity for an experienced Azure DevOps Engineer (IaC, Terraform) looking to move to a really fast-paced and cutting-edge company. This is initially a 12 month Fixed Term Contract with every chance of extension. It is a largely remote role with just 1 day a month in the office. Interested? Apply now for an immediate interview.

Are you an experienced IT Infrastructure Engineer looking for a role where you can make an impact? Join a forward-thinking team in the renewables sector and play a key role in managing and evolving their IT infrastructure. Our client is committed to innovation and sustainability, and their IT systems are at the heart of their mission. This role offers the chance to work in a collaborative environment, broaden your technical expertise, and contribute to meaningful projects that support a greener future. The Role As an IT Infrastructure Engineer, you'll be responsible for: Managing servers, networks, backups, storage, telephony, and client hardware Ensuring security compliance, including patch management, vulnerability scanning, and system hardening Maintaining and updating configuration and documentation for smooth IT operations Providing technical support and troubleshooting to assist business users Collaborating with colleagues to plan and deliver effective IT solutions Contributing to business continuity management, ensuring systems remain secure and resilient What We're Looking For We're looking for someone with hands-on experience in a business IT environment, with knowledge of: MS Windows Server & Desktop Microsoft 365 - Security & Compliance Storage Systems / Platforms Microsoft Office Suite Systems management and monitoring platforms Why Apply? Work on cutting-edge projects in the renewables sector Be part of a supportive, forward-thinking team Develop your skills in a dynamic, evolving environment Play a key role in driving innovation and sustainability If you're looking for a role where you can grow, make an impact, and contribute to a greener future, we would love to hear from you. Apply today.

Cloud Infrastructure Engineer - Stoke on Trent (AWS, Azure, GCP) Infrastructure Cloud Engineer with 2-3 years' experience with Cloud platforms, our client is flexible around AWS, Azure, or GCP. You will have Infrastructure as Code (IaC), Terraform, CloudFormation, or ARM templates. This would suit an experienced engineer with Linux/Unix or Windows server administration in a cloud or virtualised environment with basic networking (VPCs, subnets, routing, firewalls, VPNs) in a cloud context. Familiarity with CI/CD pipelines and DevOps is desired. My client would be looking for someone with scripting langs Python, Bash, or PowerShell for automation. Understanding monitoring tools, logging tools such as CloudWatch, Azure Monitor, Stackdriver or similar. This is to join a highly talented growing team in Stoke on Trent, supporting exciting projects and delivering secure, scalable, and cost-effective solutions to end clients. You'll help design, implement, and maintain cloud infrastructure across public and hybrid environments, using Infrastructure-as-Code tools. The role also involves monitoring for performance, availability, and security, as well as assisting with incident response and troubleshooting. Collaboration is key, and you'll work with engineers and architects to create reusable templates, drive automation, and support cost optimisation. This is a great opportunity to take the next step in your career, working on high-security projects in a collaborative environment. For more info pls get in touch.

Senior DevOps Engineer -SC Security Clearance We're looking for 5 Senior DevOps Engineer's to join a critical digital team, supporting high-impact systems impacting UK citizens. This is your chance to work at the heart of government digital transformation - shaping and securing platforms that millions rely on daily. Senior DevOps Engineer -SC Security Clearance- Essential Expereince Active SC Security Clearance or the ability to undergo SC Security Clearance. Strong DevOps experience with CI/CD, infrastructure as code, and automation Expertise in Unix/Linux (RHEL/CentOS) and scripting with Bash, Python, or Go Significant experience with AWS cloud infrastructure Deep understanding of IaC tools: Terraform, Packer, CloudFormation. Expereince of administering MongoDB clusters or RDS (not just used as a developer). Strong Terraform experience including production managing modules, remote state, multi-env, or Terragrunt. Understanding of version control, state backends, and team collaboration (use with AWS resources is a strong plus). Excellent Kafka skills including in a production setting, consumer lag, partitioning, troubleshooting, tuning, scaling topics. Experience of designing, implementing, securing, and supporting Unix/Linux based platforms (ideally RHEL / CentOS) and developing solutions using scripting languages (Bash, Python, Go) Experience of developing and supporting cloud-based application platforms in AWS Experience across infrastructure, CI/CD, monitoring, and incident response. Knowledge of implementing and maintaining CI/CD pipelines (ideally Gitlab CI & Jenkins). Experience in designing and implementing best practices using Infrastructure as Code (IaC) tools such as Terraform, Packer, CloudFormation and Cloud-Init Skills in Containerization: Kubernetes, ECS/Fargate, Nomad, Security: Hashicorp Vault, PKI, TLS, NCSC Principles, Networking: VPC Peering, DNS, Service Mesh, Identity & Device Management: Keycloak, Entra ID, JAMF, Okta. Extensive and demonstrable experience in designing, building, maintaining Linux workloads running across multiple environments on a cloud platform such as AWS. Extensive experience in designing and implementing best practices using IaC tools such as Terraform and automating legacy applications with scripting languages such as shell scripts, python. Extensive experience in designing and implementing best practices using CaC tools (Ansible) Extensive experience in designing and implementing CI/CD pipelines using tools (Gitlab, Github, Jenkins.) Extensive experience in building, deploying and securing containers using various strategies across multiple environments. Experience in using log management and aggregation tools such as Splunk. Senior DevOps Engineer -SC Security Clearance- Desirable Expereince Kafka experience within integrations within microservices or event driven architectures. Expereince of monitoring/observability with distributed tracing Data Lifecycle management with MongoDB or RDS. Expereince of CloudFormation, CDK, or multi-account architecture. The role is inside IR35 circa £550-£650.00 DOE- Long term contract until March 2026 Hyrid workign with ad hoc days on site in London or Leeds InterQuest Group is acting as an employment agency for this vacancy. InterQuest Group is an equal opportunities employer and we welcome applications from all suitably qualified persons regardless of age, disability, gender, religion/belief, race, marriage, civil partnership, pregnancy, maternity, sex or sexual orientation. Please make us aware if you require any reasonable adjustments throughout the recruitment process.

Java Technical Lead X5 (Java 8) - SC Security Cleared Java Technical Lead X5 is urgently needed to support our central government client to provide Java technical leadership on a high-profile digital programme. This is a hands-on role where you'll guide engineering teams, shape technical direction, and deliver secure, scalable, and resilient services. The Java Technical Leads will lead by example: designing and building Java-based microservices, driving adoption of modern cloud and DevOps practices, and ensuring services are reliable, automated, and well-monitored. The role requires someone equally comfortable setting strategy and getting into the detail of code, pipelines, and infrastructure. Java Technical Lead X5- (Java 8)- Sc Security Cleared- Essential Expereince Extensive Java development skills in Java 8 or above and Java leaderships expereince. Strong expertise in Java 8, microservices, event-driven systems. Kafka - production clusters, consumer lag, scaling, tuning, troubleshooting. MongoDB - replication, sharding, performance tuning, backups/restores. AWS - EC2, VPC, S3, RDS, IAM, ALB/NLB; HA design and cost optimisation desirable. Terraform - production experience (modules, remote state, multi-env, collaboration). Linux administration - CLI tools, system performance, network debugging, patching. CI/CD & Automation Jenkins, GitLab CI, GitHub Actions - pipeline design, automation, deployments. Containers (Docker, Kubernetes); GitOps tools (ArgoCD, Flux) a plus. Infrastructure drift detection and IAC best practices. Monitoring & Observability, tools such as Prometheus, Grafana, ELK/EFK, Datadog, CloudWatch. Building dashboards, alerting systems, SLA/SLO/SLI monitoring, alert tuning. Proven track record leading and mentoring engineering teams. Experience working in multi-disciplinary environments with multiple stakeholders. Involvement in incident response, postmortems, on-call rotations. Strong communication skills, with ability to explain technical direction clearly. Java Technical Lead X5 - (Java 8) SC Security Cleared- Key Responsibilities Lead and mentor engineers, providing technical direction and best practice guidance. Hands-on design and development of Java microservices using modern architecture patterns (Hexagonal Architecture). Drive an automation-first approach across CI/CD, infrastructure, and monitoring. Ensure systems are secure, resilient, and aligned with engineering standards. Collaborate with Dev, Ops, QA, and Security teams in a cross-functional environment. Support incident response, troubleshooting, and postmortems to improve reliability. Contract until March 2026 with scope to extend-£550-£650pday inside IR35 Hybrid working with ad hoc days on site when required at a number of regional offices including London, Midlands, South West, Wales, North West, North East, Yorkshire & Scotland. InterQuest Group is acting as an employment agency for this vacancy. InterQuest Group is an equal opportunities employer and we welcome applications from all suitably qualified persons regardless of age, disability, gender, religion/belief, race, marriage, civil partnership, pregnancy, maternity, sex or sexual orientation. Please make us aware if you require any reasonable adjustments throughout the recruitment process.

Locations : London Atlanta Boston Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do The Global Platform Team Lead and Senior Director - IT Security is responsible for leading the design, delivery, and continuous evolution of BCG's security platforms across identity, device, and data protection domains. This role ensures end-to-end security engineering across all technology environments, including cloud, on-prem, and hybrid systems. The leader will drive strategic planning, execution, and operations of scalable, automated, and resilient security controls that protect BCG's global operations and users, while enabling innovation and agility across BCG Core, BCG X, and CT worldwide. This role is also accountable for embedding security within DevSecOps practices, enforcing automation at scale, and applying Site Reliability Engineering (SRE) principles across all security services. The role requires strong partnership with ISRM, with a focus on balancing and prioritizing security requirements, automation opportunities, user experience needs, and broader business outcomes. Key Responsibilities: Strategic Leadership & Transformation: Define and execute a unified security engineering strategy that addresses identity, endpoint, and data protection across all environments. Lead the design and implementation of scalable, automated security solutions that integrate seamlessly into enterprise platforms and user experiences. Establish a global security architecture and engineering roadmap focused on prevention, detection, and rapid response. Drive continuous improvement of security posture while aligning with business needs, regulatory requirements, and user experience expectations. Champion DevSecOps practices to embed security early into development and delivery workflows. Security Platform Engineering: Lead end-to-end engineering for identity and access management (IAM), including authentication, authorization, and privileged access controls. Oversee endpoint security architecture and enforcement, ensuring comprehensive coverage for threat detection, malware prevention, and device compliance. Build and operate scalable data protection solutions, including data loss prevention (DLP), secrets management, encryption, and classification. Integrate security controls into CI/CD pipelines, cloud-native services, and on-prem platforms to enforce security-by-design principles. Deliver security capabilities that support modern work scenarios, remote access, zero-trust networking, and AI/ML workloads. Leverage automation frameworks and IaC to improve scalability and reduce manual intervention. Operational Security, SRE & Assurance: Ensure security platforms are resilient, continuously monitored, and designed for 24x7 support and incident response readiness. Embed security telemetry and observability to enable proactive threat detection and automated response. Apply SRE principles to improve reliability, performance, and maintainability of security services. Lead platform health, patching automation, and vulnerability remediation workflows. Define service level objectives (SLOs) and key performance indicators (KPIs) for all security services. Compliance, Governance & Risk Management: Ensure alignment with global compliance requirements such as ISO 27001, NIST, SOC 2, GDPR, and others. Partner with governance, legal, and ISRM teams to implement enforceable policies and standards across identity, endpoint, and data domains. Operationalize policy enforcement through automated controls and continuous compliance checks. Lead risk mitigation efforts with technical solutions that scale across diverse user and system profiles. Financial & Vendor Management: Manage security platform budgets and investments with a focus on cost optimization and long-term value. Evaluate and manage third-party vendors and partners, ensuring they meet technical, contractual, and security expectations. Lead procurement and renewal cycles in alignment with operational and architectural strategies. Leadership & Talent Development: Build and mentor a global team of security engineers, fostering a high-performance, collaborative, and forward-thinking culture. Drive internal knowledge sharing and upskilling programs across security architecture, automation, and secure software engineering. Collaborate cross-functionally with platform, product, and enterprise architecture teams to embed security early and often. What You'll Bring Required Qualifications: 10+ years of experience in cybersecurity, security engineering, or platform security roles. 5+ years in a senior leadership position with accountability for enterprise-scale security platforms. Deep expertise in IAM, endpoint security, and data protection technologies, with proven ability to design and scale global solutions. Experience with security engineering in hybrid and cloud-native environments (AWS, Azure, GCP). Proven track record in automating security controls, implementing zero-trust models, and supporting 24x7 security operations. Strong understanding of compliance frameworks and risk management strategies. Preferred Qualifications: Certifications such as CISSP, CCSP, CISM, AWS/Azure Security Specialty, or equivalent. Experience with tools like Okta, Azure AD, CrowdStrike, Tanium, Zscaler, Vault, and other modern security platforms. Familiarity with DevSecOps principles, Infrastructure as Code, and secure software development practices. Who You'll Work With Work Environment & Additional Information: Hybrid or on-site work model. Occasional travel may be required for business, vendor, or team engagement. Ability to operate in a fast-paced, complex environment, balancing long-term strategy with operational agility. Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.

Senior Cyber Security Engineer - Reading - Perm £60,000 - £70,000 Hybrid working As our client's Cyber Security business continues to grow, they are now looking for an experienced and dynamic Senior Cyber Security Engineer to join our vibrant office with hybrid working. Senior Cyber Security Engineer - Responsibility: Carry out daily security engineering/operation tasks under an ITIL framework Develop an understanding of the threats, risks, vulnerabilities and evolving attack vectors facing the business. Using strong technical knowledge, continuously analyse and make recommendations to implement effective security controls, system hardening and security improvement projects with a particular focus in application/web hosting security. Assist in the management of patching, vulnerability analysis and penetration testing to ensure recommendations are risk assessed and implemented in a timely manner Senior Cyber Security Engineer - Skills: Experience in Security Engineering, Network Security, and/or working in a Security Operations Centre (SOC). Hands-on knowledge of security tools and technologies, including Web Application Firewalls, SASE, access control, SIEM, antivirus, email/web security gateways, Firewalls, load balancers, ACLs, and network protocols (TCP/IP, routing, switching). Strong grasp of security infrastructure design, IT security best practices, and system hardening. Solid understanding of IT systems and protocols such as networks, domain management, and virtualized environments. Holds or is working towards certifications like CISSP, SANS GCIA, CompTIA Security+, CCNA/CCNP, or similar. Knowledge of ISO27001, Cyber Essentials, and AAF frameworks is a plus. Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted. Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation We take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website

Cloud Infrastructure Engineer Stoke on Trent (AWS, Azure, GCP) Infrastructure Cloud Engineer with 2-3 years experience with Cloud platforms, our client is flexible around AWS, Azure, or GCP. You will have Infrastructure as Code (IaC), Terraform, CloudFormation, or ARM templates. This would suit an experienced engineer with Linux/Unix or Windows server administration in a cloud or virtualised environment with basic networking (VPCs, subnets, routing, firewalls, VPNs) in a cloud context. Familiarity with CI/CD pipelines and DevOps is desired. My client would be looking for someone with scripting langs Python, Bash, or PowerShell for automation. Understanding monitoring tools, logging tools such as CloudWatch, Azure Monitor, Stackdriver or similar. This is to join a highly talented growing team in Stoke on Trent, supporting exciting projects and delivering secure, scalable, and cost-effective solutions to end clients. You ll help design, implement, and maintain cloud infrastructure across public and hybrid environments, using Infrastructure-as-Code tools. The role also involves monitoring for performance, availability, and security, as well as assisting with incident response and troubleshooting. Collaboration is key, and you ll work with engineers and architects to create reusable templates, drive automation, and support cost optimisation. This is a great opportunity to take the next step in your career, working on high-security projects in a collaborative environment. For more info pls get in touch.

Locations : London Atlanta Boston Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do The Global Platform Team Lead and Senior Director - IT Security is responsible for leading the design, delivery, and continuous evolution of BCG's security platforms across identity, device, and data protection domains. This role ensures end-to-end security engineering across all technology environments, including cloud, on-prem, and hybrid systems. The leader will drive strategic planning, execution, and operations of scalable, automated, and resilient security controls that protect BCG's global operations and users, while enabling innovation and agility across BCG Core, BCG X, and CT worldwide. This role is also accountable for embedding security within DevSecOps practices, enforcing automation at scale, and applying Site Reliability Engineering (SRE) principles across all security services. The role requires strong partnership with ISRM, with a focus on balancing and prioritizing security requirements, automation opportunities, user experience needs, and broader business outcomes. Key Responsibilities: Strategic Leadership & Transformation: Define and execute a unified security engineering strategy that addresses identity, endpoint, and data protection across all environments. Lead the design and implementation of scalable, automated security solutions that integrate seamlessly into enterprise platforms and user experiences. Establish a global security architecture and engineering roadmap focused on prevention, detection, and rapid response. Drive continuous improvement of security posture while aligning with business needs, regulatory requirements, and user experience expectations. Champion DevSecOps practices to embed security early into development and delivery workflows. Security Platform Engineering: Lead end-to-end engineering for identity and access management (IAM), including authentication, authorization, and privileged access controls. Oversee endpoint security architecture and enforcement, ensuring comprehensive coverage for threat detection, malware prevention, and device compliance. Build and operate scalable data protection solutions, including data loss prevention (DLP), secrets management, encryption, and classification. Integrate security controls into CI/CD pipelines, cloud-native services, and on-prem platforms to enforce security-by-design principles. Deliver security capabilities that support modern work scenarios, remote access, zero-trust networking, and AI/ML workloads. Leverage automation frameworks and IaC to improve scalability and reduce manual intervention. Operational Security, SRE & Assurance: Ensure security platforms are resilient, continuously monitored, and designed for 24x7 support and incident response readiness. Embed security telemetry and observability to enable proactive threat detection and automated response. Apply SRE principles to improve reliability, performance, and maintainability of security services. Lead platform health, patching automation, and vulnerability remediation workflows. Define service level objectives (SLOs) and key performance indicators (KPIs) for all security services. Compliance, Governance & Risk Management: Ensure alignment with global compliance requirements such as ISO 27001, NIST, SOC 2, GDPR, and others. Partner with governance, legal, and ISRM teams to implement enforceable policies and standards across identity, endpoint, and data domains. Operationalize policy enforcement through automated controls and continuous compliance checks. Lead risk mitigation efforts with technical solutions that scale across diverse user and system profiles. Financial & Vendor Management: Manage security platform budgets and investments with a focus on cost optimization and long-term value. Evaluate and manage third-party vendors and partners, ensuring they meet technical, contractual, and security expectations. Lead procurement and renewal cycles in alignment with operational and architectural strategies. Leadership & Talent Development: Build and mentor a global team of security engineers, fostering a high-performance, collaborative, and forward-thinking culture. Drive internal knowledge sharing and upskilling programs across security architecture, automation, and secure software engineering. Collaborate cross-functionally with platform, product, and enterprise architecture teams to embed security early and often. What You'll Bring Required Qualifications: 10+ years of experience in cybersecurity, security engineering, or platform security roles. 5+ years in a senior leadership position with accountability for enterprise-scale security platforms. Deep expertise in IAM, endpoint security, and data protection technologies, with proven ability to design and scale global solutions. Experience with security engineering in hybrid and cloud-native environments (AWS, Azure, GCP). Proven track record in automating security controls, implementing zero-trust models, and supporting 24x7 security operations. Strong understanding of compliance frameworks and risk management strategies. Preferred Qualifications: Certifications such as CISSP, CCSP, CISM, AWS/Azure Security Specialty, or equivalent. Experience with tools like Okta, Azure AD, CrowdStrike, Tanium, Zscaler, Vault, and other modern security platforms. Familiarity with DevSecOps principles, Infrastructure as Code, and secure software development practices. Who You'll Work With Work Environment & Additional Information: Hybrid or on-site work model. Occasional travel may be required for business, vendor, or team engagement. Ability to operate in a fast-paced, complex environment, balancing long-term strategy with operational agility. Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.