Network & cloud infrastructure security engineer

Flowdesk; Greater London; On-site; GBP 70,000 - 120,000; Full time

Benefits offered by this job

Полное медицинское страхование

Международная среда (английский)

Job summary

Flowdesk ищет специалиста по сетевой и облачной безопасности для обеспечения безопасной инфраструктуры и архитектуры в условиях быстрорастущего цифрового рынка. В задачи входит проектирование и внедрение сетевых политик, контроль доступа и работа в тесном взаимодействии с инженерами.

Кандидат должен владеть Terraform и тактиками инфраструктуры как кода, а также понимать принципы SASE/ZTNA и zero-trust. Ожидаются сильные коммуникативные навыки и умение документировать решения.

Qualifications

• Опыт в области сетевой и облачной безопасности.
• Знание SASE/ZTNA и инфраструктур как кода (IaC).
• Навыки документирования процессов и аудита.

Responsibilities

• Разрабатывать и поддерживать сетевые политики безопасности и firewall-правила.
• Проводить архитектурные обзоры безопасности для новых сервисов и интеграций.
• Работать над разделением сетей и безопасной настройкой облачной инфраструктуры.

Skills

Сетевые навыки безопасности

Облачная безопасность

Коммуникационные навыки

Автоматизация и IaC

Документирование и аудит

Tools

Terraform

SASE/ZTNA

VPN/SSL инспекция

Kubernetes networking

Job description

Описание:

At Flowdesk, we are building the infrastructure powering the next era of global finance. As a full-service digital asset trading and technology firm, we provide liquidity solutions, OTC trading, and market infrastructure that connect digital assets to global markets with institutional-grade precision, transparency, and scale. Flowdesk combines expertise from traditional finance, algorithmic trading, and blockchain technology to deliver always-on trading capabilities across the digital asset ecosystem. Founded in 2020, we have grown into a global team supporting institutions, exchanges, and token issuers worldwide as the financial system evolves toward tokenized markets.

Задачи:

• Design, run and tune cloud-native, virtual and on-premises firewalls, including rule hygiene and change review
• Run security architecture reviews for new services, integrations and offices, and write up findings with clear, prioritised fixes
• Plan network segmentation across cloud and office environments, so sensitive systems are isolated from everything else
• Review cloud infrastructure architecture and help design and support a best practice secure cloud infrastructure
• Own our SASE and zero-trust access approach
• Manage the security of network devices, including configuration baselines, patching, access, lifecycle and routing protocols
• Build and change network security controls through Terraform and infrastructure as code, using the same review and approval process as our engineering teams
• Work across security and engineering teams on network changes, so security is part of the design and not added afterwards
• Monitor network telemetry with SecOps, and help investigate and contain incidents
• Produce evidence for audits and regulators, and help close findings from pentests and cloud posture management reviews
• Set standards and reference architectures for network controls, and keep them current
• Work as part of the wider security team, and cover gaps in other areas when they arise, such as during absences, incidents or peaks in workload

Требования:

• Several years in network or cloud security engineering, with hands-on production experience
• Working knowledge of both cloud and on-premises networks: private networks, routing, peering, private connectivity, DNS, low latency networks, load balancing, egress control, switching and wireless
• Experience managing network devices securely
• Hands-on experience with cloud and next-generation firewalls, and with SASE or ZTNA platforms
• Solid understanding of Terraform and infrastructure as code, and the ability to work day to day in an environment where infrastructure is managed that way
• Scripting skills (required for the role)
• General security knowledge across the main domains, including mTLS, IPsec, WireGuard, SSL inspection, IDPS, and network monitoring and detection
• A process-oriented approach: you document what you do, follow change control, and leave an audit trail
• Experience reviewing architectures and explaining risk to engineers and non-technical stakeholders
• Willingness to work across the security team and learn adjacent areas, such as incident response, GRC evidence or cloud security, as needed
• Security-by-design mindset: engages early in network and architecture changes rather than reviewing at the end
• Clear communicator, able to explain risk to engineers and non-technical stakeholders
• Process-oriented: documents decisions, follows change control and leaves a clear audit trail
• Automation-minded: prefers infrastructure as code and scripting over manual change
• Comfortable working across the security team and stepping in on adjacent areas when needed
• Будет плюсом: Experience working in a regulated, controlled environment, such as financial services or crypto; Container and Kubernetes network policy and service mesh experience; Relevant security or cloud networking certifications

Условия:

• International environment (English is the main language)
• 100% health coverage
• Team events and offsites
• Company Pension scheme
• Learning and Development budget