Infrastructure Engineer (ZTNA)

Lloyds Banking Group
Leeds, UK
12 days ago
Apply on www.jobs.service.gov.uk
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Compensation
£48,987.0 - £55,000.0
Working hours
Regular working hours

Tech stack

Microsoft Azure DevOps Domain Name System (DNS) Identity and Access Management Python (Programming Language) Networking Basics OpenID Zero Trust Network Access Security Assertion Markup Language (SAML) TCP/IP Cloud-native Network Functions (CNF) Transport Layer Security
+2 more
Infrastructure Automation Frameworks Terraform

Job description

You’ll be a key engineer responsible for designing, evolving and operating our Zero Trust Network Access (ZTNA) platforms, protecting access to critical applications and services through modern identity-aware and context-driven security controls. You’ll work using modern engineering practices such as automation and secure-by-default design to improve resilience, performance and security. This role offers real scope to influence technical direction, uplift engineering standards, and develop our ZTNA and wider Zero Trust capabilities., Our ambition is to be the leading UK business for diversity, equity and inclusion, supporting our customers, colleagues and communities. We are committed to creating an environment in which everyone can thrive, learn and develop.

Requirements

  • Proven engineering mindset with hands-on experience across ZTNA, remote access or identity-aware access technologies across on-prem and cloud
  • Demonstrable experience in Cloud network security (preferably Azure and GCP)
  • Strong automation and scripting skills (Python preferred)
  • Practical experience using Infrastructure-as-Code tools (Terraform preferred)
  • Experience working with modern CI/CD pipelines
  • Strong understanding of networking fundamentals including TCP/IP, DNS and TLS
  • Knowledge of identity protocols such as SAML and OIDC
  • Understanding of Zero Trust principles
  • Ability to lead complex technical investigations and diagnose issues under pressure
  • Confidence to influence engineering decisions and contribute to technical direction

And it would be great if you had any of the following…

  • Knowledge of Identity & Access Management (IAM)
  • Experience with device posture and endpoint security
  • Understanding of secure application access patterns
  • Experience with Zero Trust architectures
  • Knowledge of federation and user-to-application segmentation
  • Professional cloud certifications
  • Security, identity or network engineering accreditations

Benefits & conditions

We were one of the first major organisations to set goals on diversity in senior roles, create a menopause health package, and launch a dedicated Working with Cancer initiative. We offer reasonable workplace adjustments for colleagues with disabilities, including flexibility in office attendance, location and working patterns. As a Disability Confident Leader, we guarantee interviews for a fair and proportionate number of applicants who meet the minimum criteria for the role and have a disability, long-term health or neurodivergent condition, through the Disability Confident Scheme.

We provide reasonable adjustments throughout the recruitment process to reduce or remove barriers - just let us know what you need.

We also offer a wide-ranging benefits package, which includes…

  • A generous pension contribution of up to 15%
  • An annual bonus award, subject to Group performance
  • Share schemes including free shares
  • Benefits you can adapt to your lifestyle, such as discounted shopping
  • 28 days’ holiday, with bank holidays on top
  • A range of wellbeing initiatives and generous parental leave policies

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.jobs.service.gov.uk
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

5:02 min

Mapping distributed compute paradigms to modern vehicles

Joachim Werner · LIVE

4:35 min

Setting up passwordless federated identity configuring OpenID Connect patterns

Marcel Lupo · LIVE

2:17 min

Mapping the maturity roadmap for scaled devops adoption

Dominik Krichbaum Dominik Krichbaum · World Congress 2026 Europe

1:20 min

Identifying multi-disciplinary talent for developer experience engineering roles

Hazal Mestci +1 · Coffee With Developers

3:50 min

Queues in TCP stacks and continuous network connections

Clemens Vasters Clemens Vasters · World Congress 2022

2:52 min

Implementing IAM with Keycloak and OpenID Connect

Thomas Südbröcker · LIVE

Videos

See all

Related articles

See all