Network Security Technical Design Architect

NatWest Group; City Of London; On-site; GBP 60,000 - 90,000; Full time

Job summary

A leading financial institution is seeking a Network Security Technical Design Architect in London. This role involves designing self-service infrastructure products and managing product roadmaps. Candidates should have experience with cloud technologies, specifically F5 ADCs and NGINX, and the ability to work collaboratively across teams. Strong communication and leadership skills are essential. Competitive salary and opportunity for personal development offered.

Qualifications

• Proven track record implementing enterprise solutions using F5 LTM, DNS, and AWAF.
• Experience with NGINX ingress controller and NGINX App Protect for Kubernetes.
• Knowledge of Kubernetes, preferably Openshift.
• Solid foundation in Networking (CCNA or CCNP level knowledge).

Responsibilities

• Design and engineer intuitive, self-service infrastructure products.
• Develop technology standards within the Network Security Platform.
• Provide technical leadership in developing high availability systems.
• Participate in community of practice, sharing learnings and best practices.

Skills

Design and architecture of enterprise application delivery controller (ADC) solutions

Experience with automation, DevOps, and infrastructure as code (IaC)

Public cloud knowledge (GCP and Azure)

Collaborative communication skills

Tools

F5 ADCs

NGINX ingress for Kubernetes

Terraform

GitLab

Job description

Overview

You'll collaborate across boundaries to build the best possible solutions for public and private cloud environments and develop infrastructure technology to comply with security, resilience, sustainability, and operational requirements with observability and guardrails built in.

You'll also champion and drive the use of automation to provide testing and a route to live for the product along with coaching and mentoring other engineers and collaborating on developmental activities.

This is a chance to create an environment to build communities with colleagues across bank and share engineering best practices, allowing you to provide thought leadership while developing solutions.

What you’ll do

As a Network Security Technical Design Architect, you’ll contribute to and manage the selection, creation and maintenance of technologies required to meet the needs of our customers, strategic targets and architecture outcomes, along with developing products using modern engineering practices and tools. We’ll look to you to collaborate with stakeholders to develop product roadmaps and manage the lifecycle of the products and support engineered products to respond to customer feedback, new feature requests, resolve production issues and help customers consume our products. Additionally, you’ll:

• Take a lead role within a team to design and engineer intuitive, self-service infrastructure products
• Be responsible for developing technology standards and patterns within the Network Security Platform
• Proactively scan the external market and use internal insights, translating these into customer centric products
• Provide technical leadership in the development of high availability, low cost systems
• Take a lead technical role in programme increment planning, system demos and retrospective sessions
• Create and participate in a community of practice, sharing learnings and best practice with the community
• Use market insights to introduce innovative ideas and driving the delivery of those through product features

We’re looking for a strong collaborative communicator who can articulate technical concepts clearly to peers and customers.

Qualifications

To thrive in this role, you’ll have experience in design and architecture of enterprise application delivery controller (ADC) solutions, involving vendor technologies such as F5 ADCs and NGINX ingress for Kubernetes. Experience with automation, DevOps, and infrastructure as code (IaC) is essential. Public cloud vendor knowledge covering GCP and Azure would be beneficial. Furthermore, you’ll need:

• Proven track record implementing enterprise solutions using F5 LTM, DNS, and AWAF
• Experience of NGINX ingress controller and NGINX App Protect for Kubernetes
• Experience of AWS public cloud networking and automated deployments using Terraform
• Knowledge and experience of Kubernetes, preferably Openshift
• Experience of the development of CI or CD pipelines using modern tooling such as GitLab
• A solid foundation in Networking such as, CCNA or CCNP level knowledge, valid certification not required
• The ability to explore multiple approaches and seek new ideas from different sources to overcome barriers and generate innovative solutions to be the best for our customers