Cloud Security Engineer, Norwich

Provide hands‑on cloud security engineering to support data centre to AWS migration programmes, ensuring workloads move safely into the Landing Zone/Control Tower model with the right guardrails, controls, and operational readiness.

• Administer, operate and optimise Aviva’s Wiz Cloud Security Posture Management (CSPM/CNAPP) platform.
• Drive operational excellence, support engineering teams, integrate Wiz into enterprise tooling, and maintain policy compliance and posture improvement.
• Own day‑to‑day administration of the Wiz platform across all cloud environments.
• Maintain Wiz connectors, least‑privilege roles, and work with DevOps/SRE teams to embed Wiz in CI/CD pipelines for IaC scanning.
• Work closely with the Cloud Security Architect to define and implement security building blocks and controls to ensure migration designs meet required security outcomes.
• Strong experience in AWS security fundamentals and landing zone controls.
• Implement core cloud security controls (secure connectivity, IAM, data protection, logging and monitoring).
• Collaborate across delivery teams to remove blockers and keep migration delivery on track.

Cloud Security Posture Management.