Senior Network Security Infrastructure Engineer

As Senior Network Security Infrastructure Engineer, you will design, implement, and operate secure, scalable network security platforms across cloud and on‑prem environments. You will drive infrastructure modernisation, automation, and best practices in collaboration with Cyber Security, Cloud Engineering, Architecture, and Operations teams. You’ll act as a technical escalation point and mentor engineers while shaping the organisation's security standards. This role offers impact across enterprise services, improving resilience, compliance, and performance in a fast‑paced financial services setting.

• Lead design, deployment, and optimisation of enterprise network security platforms (cloud and on‑prem)
• Act as technical authority for security infrastructure, guiding solution design and architectural reviews
• Build IaC solutions using Terraform to enable scalable, repeatable deployments
• Develop automation with Python and Ansible to improve reliability and efficiency
• Integrate automation and security controls into CI/CD pipelines
• Troubleshoot complex network and security issues across environments
• Drive continuous improvement for performance, resilience, security, and cost
• Collaborate with Architecture, Cyber Security, and Cloud teams on strategy and standards
• Produce high‑quality technical documentation and design artefacts
• Support governance, compliance, risk management, and audits
• Mentor engineers and promote knowledge sharing and engineering excellence
• Participate in major incident management and provide senior technical leadership

• Minimum 5 years' experience with Fortinet security products (certifications desirable)
• Experience designing and operating AWS network security and connectivity services (Cloud WAN, WAF, Firewall Manager, Transit Gateway, Direct Connect)
• Strong Terraform and IaC expertise
• Experience with GitLab and modern SCM practices
• Advanced knowledge of enterprise firewall technologies (Fortinet) across on‑prem and cloud
• Strong understanding of AWS networking (VPNs, DNS, load balancing, routing, security controls)
• Deep knowledge of networking protocols (TCP/IP, BGP, OSPF, routing, switching, segmentation)
• Understanding of digital certificates and modern cryptography
• Strong understanding of 802.1X and VPN/encapsulation technologies
• Knowledge of identity-based authentication/authorization and IAM in cloud
• Experience implementing network security controls and cloud‑native security solutions
• Experience automating infrastructure and security using Python/Ansible
• Excellent troubleshooting, analytical, and stakeholder management skills
• Ability to work independently within a collaborative environment

• strong communication
• stakeholder management
• mentoring/leadership
• Terraform / IaC
• Python
• Ansible