Network & Cloud Infrastructure Security Engineer

You will own cloud and network security design and day-to-day infrastructure controls. You will design and operate firewalls, network segmentation, SASE, zero-trust access, and network-device security. You will review new architectures, implement controls through infrastructure as code, support incident investigations, and provide audit evidence.

Responsibilities

• Design, operate, and tune cloud-native, virtual, and on-premises firewalls
• Run security architecture reviews and document prioritised fixes
• Plan network segmentation across cloud and office environments
• Review cloud infrastructure architecture and support secure cloud design
• Own the SASE and zero-trust access approach
• Manage network-device security, including baselines, patching, access, lifecycle, and routing protocols
• Build and change network security controls through Terraform and infrastructure as code
• Work with security and engineering teams on network changes
• Monitor network telemetry and help investigate and contain incidents
• Produce audit and regulatory evidence and close pentest and cloud-posture findings
• Set and maintain network-control standards and reference architectures
• Cover adjacent security areas during absences, incidents, and workload peaks

Requirements

• Several years of network or cloud security engineering experience with hands-on production experience
• Knowledge of cloud and on-premises networks, including private networks, routing, peering, DNS, load balancing, egress control, switching, and wireless
• Experience managing network devices securely
• Experience with cloud and next-generation firewalls and SASE or ZTNA platforms
• Understanding of Terraform and infrastructure as code
• Scripting skills
• Security knowledge including mTLS, IPsec, WireGuard, SSL inspection, IDPS, and network monitoring and detection
• Experience reviewing architectures and explaining risk to technical and non-technical stakeholders
• Willingness to work across adjacent security areas
• Experience in a regulated environment such as financial services or crypto
• Container and Kubernetes network-policy and service-mesh experience
• Relevant security or cloud-networking certifications

Benefits

• 100% health coverage
• Team events and offsites
• Company Pension scheme
• Learning and Development budget