Head of Core Services Engineering

Overview

In this senior leadership role, you will define and deliver the global strategy for core infrastructure services, identity platforms, and network security controls. You will connect engineering, security, and architecture teams to translate business and regulatory requirements into secure, resilient global services. You’ll lead the lifecycle of tier-0 services that underpin security and operations, shaping CTO direction and risk posture. This is a high-impact, cross-region role with a focus on automation, reliability, and continuous improvement.

Pay / Benefits

• flexible work
• health and wellbeing rewards
• employee share purchase plan with company contribution
• recognition awards and team events
• career growth opportunities
• welcoming and close-knit culture

Responsibilities

• Define and lead the global strategy, standards and multi-year roadmap for core services and network security, aligned with CTO, CISO and enterprise architecture direction
• Act as design authority for core services, establishing reference architectures, approved patterns, engineering standards and reusable frameworks
• Own budgets, investment cases, licences, renewals, hardware lifecycle, support contracts and strategic vendor relationships
• Lead audit, control testing, disaster recovery and remediation activity across identity, access and core network controls
• Build, lead and develop distributed engineering teams across EMEA, North America and Australia, fostering automation, accountability, reliability and continuous improvement

Key requirements

• Deep knowledge of core infrastructure services, including DNS, DHCP, IPAM, DDI platforms and resilient network-time architectures
• Strong experience of secure access and web security technologies, including SASE/SSE, Zscaler, proxy, WAF, load balancing and application delivery
• Architecture-level understanding of Active Directory, Microsoft Entra ID, hybrid identity, conditional access, federation and modern authentication protocols
• Experience with privileged access management and identity governance platforms, ideally including CyberArk and SailPoint
• Knowledge of zero trust architecture, MFA, FIDO2/passkeys, certificate-based authentication, device trust and risk-based access controls
• Strong understanding of PKI, HSMs, certificate lifecycle automation, cryptographic standards and emerging post-quantum requirements
• Experience integrating monitoring and observability platforms with SIEM, IT service management and configuration-management capabilities
• Experience of agile delivery, product roadmaps, prioritised backlogs and service-management practices
• Commercial expertise covering financial modelling, TCO analysis, vendor management, contract negotiation and SLA management
• Excellent communication and influencing skills, with the ability to translate complex infrastructure, security and resilience topics into business value for executive, risk and technical audiences

• communication
• influencing
• leadership
• DNS, DHCP, IPAM, DDI
• SASE/SSE, Zscaler, proxy, WAF, load balancing
• Active Directory, Microsoft Entra ID, hybrid identity

…