JOB TITLE: Infrastructure Engineer (ZTNA)
SALARY: £48,987 – £55,000
LOCATION: Edinburgh, Leeds, Manchester
HOURS: Full-time
WORKING PATTERN: Our work style is hybrid, which involves spending at least two days per week, or 40% of our time, at one of our office sites. Colleagues with disabilities can be supported with workplace adjustments including hybrid working expectations in line with our Flexibility Works policy.
What you’ll be doing
You will be a key engineer responsible for designing, evolving and operating our Zero Trust Network Access (ZTNA) platforms, protecting access to critical applications and services through modern identity aware and context driven security controls.
You will work using modern engineering practices such as automation and secure by default design to improve resilience, performance and security. This role offers real scope to influence technical direction, uplift engineering standards, and develop our ZTNA and wider Zero Trust capabilities.
Day to day, you’ll operate with a high degree of autonomy and technical influence, engineering new capabilities using Infrastructure as Code, CI/CD and policy as code approaches, driving platform modernisation, improving observability and telemetry, supporting major incident diagnostics, embedding Zero Trust principles, and producing high quality engineering documentation. You’ll also participate in the on call rota, contributing to the operational resilience of critical access services.
What we’re looking for
- Proven engineering mindset with hands‑on experience across ZTNA, remote access or identity aware access technologies across on prem and cloud
- Demonstrable experience in Cloud network security (preferably Azure and GCP)
- Strong automation and scripting skills (Python preferred)
- Practical experience using Infrastructure as Code tools (Terraform preferred)
- Experience working with modern CI/CD pipelines
- Strong understanding of networking fundamentals including TCP/IP, DNS and TLS
- Knowledge of identity protocols such as SAML and OIDC
- Understanding of Zero Trust principles
- Ability to lead complex technical investigations and diagnose issues under pressure
- Confidence to influence engineering decisions and contribute to technical direction
And it would be great if you had any of the following
- Knowledge of Identity & Access Management (IAM)
- Experience with device posture and endpoint security
- Understanding of secure application access patterns
- Experience with Zero Trust architectures
- Knowledge of federation and user to application segmentation
- Professional cloud certifications
- Security, identity or network engineering accreditations
We also offer a wide-ranging benefits package, which includes
- A generous pension contribution of up to 15%
- An annual bonus award, subject to Group performance
- Share schemes including free shares
- Benefits you can adapt to your lifestyle, such as discounted shopping
- 28 days’ holiday, with bank holidays on top
- A range of wellbeing initiatives and generous parental leave policies
Disability inclusive hiring
We provide reasonable adjustments throughout the recruitment process to reduce or remove barriers – just let us know what you need. As a Disability Confident Leader, we guarantee interviews for a fair and proportionate number of applicants who meet the minimum criteria for the role and have a disability, long‑term health or neurodivergent condition, through the Disability Confident Scheme.
#J-18808-Ljbffr…