Infrastructure Engineer (ZTNA)

Overview

As an Infrastructure Engineer specializing in ZTNA, you design, evolve and operate secure access to critical applications. You will advance Zero Trust capabilities through automation, IaC, and secure-by-default design, shaping how we protect services at scale. You’ll influence technical direction, improve resilience and observability, and contribute to platform modernization. This role offers meaningful impact in a fast-changing, purpose-driven bank that values inclusion and continuous learning.

Pay / Benefits

• Pension contribution up to 15%
• Annual bonus subject to Group performance
• Share schemes including free shares
• Discounted shopping benefits
• 28 days holiday plus bank holidays
• Wellbeing initiatives and parental leave policies

Responsibilities

• Design, evolve and operate ZTNA platforms ensuring secure access to critical services
• Develop capabilities using Infrastructure-as-Code, CI/CD and policy-as-code
• Drive platform modernization and improve observability and telemetry
• Support major incident diagnostics and contribute to operational resilience
• Produce high-quality engineering documentation and guidance
• Participate in on-call rotations to maintain critical access services
• Influence engineering direction and uplift engineering standards

Key requirements

• Hands-on experience across ZTNA, remote access or identity-aware access technologies (on-prem and cloud)
• Cloud network security experience (Azure and/or GCP)
• Strong automation and scripting (Python preferred)
• Experience with Infrastructure-as-Code tools (Terraform preferred)
• Experience with modern CI/CD pipelines
• Solid networking fundamentals (TCP/IP, DNS, TLS)
• Knowledge of identity protocols such as SAML and OIDC
• Understanding of Zero Trust principles
• Ability to lead complex technical investigations under pressure
• Confidence to influence engineering decisions and direction

• Problem-solving under pressure
• Strong communication and collaboration
• Ability to influence and lead technical discussions
• ZTNA and identity-aware access technologies
• Azure and GCP cloud networking
• Python scripting

…