Network & Cloud Infrastructure Security Engineer

Flowdesk Group; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

100% health coverage

Company Pension scheme

Learning and Development budget

Team events and offsites

Job summary

Flowdesk Group in London seeks a Network & Cloud Infrastructure Security Engineer to design and run cloud-native and on-prem security controls. You will own network security design, review new services, and ensure security is engineered in from the start.

You will work with SecOps and engineering teams, implement SASE/ZTNA, manage firewalling, Terraform-based controls, and prepare evidence for audits across cloud and on-prem environments.

Qualifications

• Several years in network or cloud security engineering, with hands-on production experience.
• Working knowledge of both cloud and on-premises networks: private networks, routing, peering, private connectivity, DNS, low latency networks, load balancing, egress control, switching and wireless.
• Experience managing network devices securely.
• Hands-on experience with cloud and next-generation firewalls, and with SASE or ZTNA platforms.
• Solid understanding of Terraform and infrastructure as code, and the ability to work day to day in an environment where infrastructure is managed that way.
• Scripting skills (required for the role).
• General security knowledge across the main domains, including mTLS, IPsec, WireGuard, SSL inspection, IDPS, and network monitoring and detection.
• A process-oriented approach: you document what you do, follow change control, and leave an audit trail.
• Experience reviewing architectures and explaining risk to engineers and non-technical stakeholders.
• Willingness to work across the security team and learn adjacent areas, such as incident response, GRC evidence or cloud security, as needed.
• Experience working in regulated environments (financial services or crypto)
• Container and Kubernetes network policy and service mesh experience
• Relevant security or cloud networking certifications

Responsibilities

• Design, run and tune cloud-native, virtual and on-premises firewalls, including rule hygiene and change review.
• Run security architecture reviews for new services, integrations and offices, and write up findings with clear, prioritised fixes.
• Plan network segmentation across cloud and office environments, so sensitive systems are isolated from everything else.
• Review cloud infrastructure architecture and help design and support a best practice secure cloud infrastructure.
• Own our SASE and zero-trust access approach.
• Manage the security of network devices, including configuration baselines, patching, access, lifecycle and routing protocols.
• Build and change network security controls through Terraform and infrastructure as code, using the same review and approval process as our engineering teams.
• Work across security and engineering teams on network changes, so security is part of the design and not added afterwards.
• Monitor network telemetry with SecOps, and help investigate and contain incidents.
• Produce evidence for audits and regulators, and help close findings from pentests and cloud posture management reviews.
• Set standards and reference architectures for network controls, and keep them current.
• Work as part of the wider security team, and cover gaps in other areas when they arise, such as during absences, incidents or peaks in workload

Skills

Scripting

Security engineering

Cloud networking

Network security

Tools

Terraform

Next-Gen Firewalls

ZTNA/SASE

Kubernetes NetworkPolicy

Job description

Network & Cloud Infrastructure Security Engineer

London

About Flowdesk

At Flowdesk, we are building the infrastructure powering the next era of global finance. As a full-service digital asset trading and technology firm, we provide liquidity solutions, OTC trading, and market infrastructure that connect digital assets to global markets with institutional-grade precision, transparency, and scale. Flowdesk combines expertise from traditional finance, algorithmic trading, and blockchain technology to deliver always-on trading capabilities across the digital asset ecosystem.

Founded in 2020, we have grown into a global team supporting institutions, exchanges, and token issuers worldwide as the financial system evolves toward tokenized markets.

Why join Flowdesk? You’ll be joining a company operating at the intersection of finance, technology, and crypto – solving complex market problems, building critical infrastructure, and helping shape how digital assets move globally. We move fast, think long term, and work with a strong ownership mindset across engineering, trading, product, operations, and business teams.

Role Description

Flowdesk runs regulated crypto trading and custody on cloud infrastructure across several jurisdictions. The Security team keeps that infrastructure and the networks around it tightly controlled, segmented and provable to auditors and regulators.

In this role you will own cloud and network security design and the day-to-day operation of our infrastructure controls. You will also review architecture for new systems before they go live.

You will work as part of the wider security team, alongside engineering teams and SecOps, so that security is part of the design from the start.

Key Responsibilities

• Design, run and tune cloud-native, virtual and on-premises firewalls, including rule hygiene and change review
• Run security architecture reviews for new services, integrations and offices, and write up findings with clear, prioritised fixes
• Plan network segmentation across cloud and office environments, so sensitive systems are isolated from everything else
• Review cloud infrastructure architecture and help design and support a best practice secure cloud infrastructure
• Own our SASE and zero-trust access approach
• Manage the security of network devices, including configuration baselines, patching, access, lifecycle and routing protocols
• Build and change network security controls through Terraform and infrastructure as code, using the same review and approval process as our engineering teams
• Work across security and engineering teams on network changes, so security is part of the design and not added afterwards
• Monitor network telemetry with SecOps, and help investigate and contain incidents
• Produce evidence for audits and regulators, and help close findings from pentests and cloud posture management reviews
• Set standards and reference architectures for network controls, and keep them current
• Work as part of the wider security team, and cover gaps in other areas when they arise, such as during absences, incidents or peaks in workload

Requirements

Must Have

• Several years in network or cloud security engineering, with hands-on production experience
• Working knowledge of both cloud and on-premises networks: private networks, routing, peering, private connectivity, DNS, low latency networks, load balancing, egress control, switching and wireless
• Experience managing network devices securely
• Hands-on experience with cloud and next-generation firewalls, and with SASE or ZTNA platforms
• Solid understanding of Terraform and infrastructure as code, and the ability to work day to day in an environment where infrastructure is managed that way
• Scripting skills (required for the role)
• General security knowledge across the main domains, including mTLS, IPsec, WireGuard, SSL inspection, IDPS, and network monitoring and detection
• A process-oriented approach: you document what you do, follow change control, and leave an audit trail
• Experience reviewing architectures and explaining risk to engineers and non-technical stakeholders
• Willingness to work across the security team and learn adjacent areas, such as incident response, GRC evidence or cloud security, as needed

Preferred

Highly desired

• Experience working in a regulated, controlled environment, such as financial services or crypto

Helpful

• Container and Kubernetes network policy and service mesh experience
• Relevant security or cloud networking certifications

Person Profile

• Security-by-design mindset: engages early in network and architecture changes rather than reviewing at the end
• Clear communicator, able to explain risk to engineers and non-technical stakeholders
• Process-oriented: documents decisions, follows change control and leaves a clear audit trail
• Automation-minded: prefers infrastructure as code and scripting over manual change
• Comfortable working across the security team and stepping in on adjacent areas when needed

Company Culture & Values

• Take Action & Own the Mission
• Be of Service & Contribute
• Act with Integrity & Respect
• International environment (English is the main language)
• 100% health coverage
• Team events and offsites
• Company Pension scheme
• Learning and Development budget