Senior Network Security Infrastructure Engineer

Description

The company is a global provider of market infrastructure, giving clients access to financial and commodities markets. Its work supports price discovery, liquidity and market data distribution.

It is the largest interdealer broker by revenue, ranks first for energy and commodities brokerage, and is the leading provider of OTC market data.

Founded in London in 1866, it runs more than 60 offices in 27 countries and employs 5,200 people.

This is a senior technical leadership role for designing, building and running secure, scalable, resilient network security platforms across cloud and on-premises environments. You will work with Cyber Security, Cloud Engineering, Architecture and Operations to set and deliver the network security strategy, protecting critical enterprise services and keeping them reliable and compliant. You will also be the senior escalation point, mentor engineers and promote engineering standards across the estate.

Responsibilities

• Lead the design, build, rollout and tuning of enterprise network security platforms in cloud and on-premises settings.
• Act as the technical authority for network security infrastructure, advising on solution design, architecture reviews and engineering practice.
• Build repeatable deployments with Infrastructure as Code, using Terraform and related tools.
• Write automation in Python, Ansible and similar tools to make operations more efficient and platforms more reliable.
• Embed infrastructure automation and security controls in CI/CD pipelines so software and infrastructure ship securely.
• Diagnose and fix complex network and security problems across development, test and production.
• Lead improvement work on performance, resilience, security and cost.
• Work with Architecture, Cyber Security and Cloud teams to define and update the network security strategy and standards.
• Write and keep current technical documentation, operational procedures and design records.
• Support governance, compliance, risk and audit work against internal and regulatory standards.
• Mentor and coach engineers, sharing knowledge and raising the technical bar.
• Take senior technical lead on major incidents and problem management when needed.

Requirements

• Essential: At least 5 years working with Fortinet security products. Certifications are desirable.
• Essential: Proven experience designing and running AWS Cloud WAN, AWS WAF, AWS Firewall Manager, AWS Transit Gateway and AWS Direct Connect.
• Essential: Strong Terraform and Infrastructure as Code skills.
• Essential: Experience with GitLab and modern source control practices.
• Essential: Advanced knowledge of enterprise firewalls on-premises and in the cloud, including Fortinet.
• Essential: Solid grasp of AWS networking and architectures, including VPNs, DNS, load balancing, routing and security controls.
• Essential: Deep knowledge of TCP/IP, BGP, OSPF, routing, switching and network segmentation.
• Essential: Deep, demonstrable understanding of digital certificates and modern cryptography.
• Essential: Strong grasp of 802.1X technology and patterns.
• Essential: Working knowledge of VPN and encapsulation technologies.
• Essential: Good understanding of identity-based authentication and authorisation, including cloud IAM controls.
• Essential: Proven record implementing network security controls, security best practice and cloud-native security solutions.
• Essential: Experience building infrastructure and security automation in Python, Ansible or equivalent tools.
• Essential: Excellent troubleshooting and analysis, resolving complex issues under pressure.
• Essential: Strong communication and stakeholder management across technical and business teams.
• Essential: Able to work independently while contributing to a collaborative engineering group.
• Desired: Degree in Computer Science, Information Technology, Cyber Security, Engineering or a related field, or equivalent industry experience.
• Desired: AWS certifications such as AWS Certified Advanced Networking, Specialty or AWS Certified Security, Specialty.
• Desired: Experience with network observability, monitoring and telemetry platforms.
• Desired: Experience with DevOps practices and CI/CD pipelines in infrastructure environments.
• Desired: Knowledge of Site Reliability Engineering principles and operational excellence frameworks.
• Desired: Working knowledge of ISO/IEC 27001 and SOC 2, and how they apply in enterprise environments.
• Desired: Experience in financial services or other highly regulated environments.
• Desired: Familiarity with Zero Trust networking and modern cloud security architectures.

Conditions

Hybrid working, based at 135 Bishopsgate, London, UK.

Role band: Manager, level 6.

Equal opportunity: the company welcomes applicants from all backgrounds and encourages those who meet most but not all of the criteria to apply.