Cloud & Network Security Engineer – Zero Trust & SASE

Flowdesk Group; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

100% health coverage

Company Pension scheme

Learning and Development budget

Team events and offsites

Job summary

Flowdesk Group in London seeks a Network & Cloud Infrastructure Security Engineer to design and run cloud-native and on-prem security controls. You will own network security design, review new services, and ensure security is engineered in from the start.

You will work with SecOps and engineering teams, implement SASE/ZTNA, manage firewalling, Terraform-based controls, and prepare evidence for audits across cloud and on-prem environments.

Qualifications

• Several years in network or cloud security engineering, with hands-on production experience.
• Working knowledge of both cloud and on-premises networks: private networks, routing, peering, private connectivity, DNS, low latency networks, load balancing, egress control, switching and wireless.
• Experience managing network devices securely.
• Hands-on experience with cloud and next-generation firewalls, and with SASE or ZTNA platforms.
• Solid understanding of Terraform and infrastructure as code, and the ability to work day to day in an environment where infrastructure is managed that way.
• Scripting skills (required for the role).
• General security knowledge across the main domains, including mTLS, IPsec, WireGuard, SSL inspection, IDPS, and network monitoring and detection.
• A process-oriented approach: you document what you do, follow change control, and leave an audit trail.
• Experience reviewing architectures and explaining risk to engineers and non-technical stakeholders.
• Willingness to work across the security team and learn adjacent areas, such as incident response, GRC evidence or cloud security, as needed.
• Experience working in regulated environments (financial services or crypto)
• Container and Kubernetes network policy and service mesh experience
• Relevant security or cloud networking certifications

Responsibilities

• Design, run and tune cloud-native, virtual and on-premises firewalls, including rule hygiene and change review.
• Run security architecture reviews for new services, integrations and offices, and write up findings with clear, prioritised fixes.
• Plan network segmentation across cloud and office environments, so sensitive systems are isolated from everything else.
• Review cloud infrastructure architecture and help design and support a best practice secure cloud infrastructure.
• Own our SASE and zero-trust access approach.
• Manage the security of network devices, including configuration baselines, patching, access, lifecycle and routing protocols.
• Build and change network security controls through Terraform and infrastructure as code, using the same review and approval process as our engineering teams.
• Work across security and engineering teams on network changes, so security is part of the design and not added afterwards.
• Monitor network telemetry with SecOps, and help investigate and contain incidents.
• Produce evidence for audits and regulators, and help close findings from pentests and cloud posture management reviews.
• Set standards and reference architectures for network controls, and keep them current.
• Work as part of the wider security team, and cover gaps in other areas when they arise, such as during absences, incidents or peaks in workload

Skills

Scripting

Security engineering

Cloud networking

Network security

Tools

Terraform

Next-Gen Firewalls

ZTNA/SASE

Kubernetes NetworkPolicy

Job description

Flowdesk Group in London seeks a Network & Cloud Infrastructure Security Engineer to design and run cloud-native and on-prem security controls. You will own network security design, review new services, and ensure security is engineered in from the start.

You will work with SecOps and engineering teams, implement SASE/ZTNA, manage firewalling, Terraform-based controls, and prepare evidence for audits across cloud and on-prem environments.