Senior Network Security Infrastructure Engineer

tp; Greater London; Presencial; GBP 90.000 - 140.000; Jornada completa

Descripción de la vacante

TP ICAP Group is seeking a Senior Network Security Infrastructure Engineer to design, implement and operate secure network security platforms across cloud and on-prem environments.

You will work with Cyber Security, Cloud Engineering, Architecture and Operations to define strategy, build automation with Terraform and Python, and mentor engineers while ensuring compliance and reliability.

Formación

• Minimum of 5 years' experience with Fortinet security products.

Responsabilidades

• Lead the design, engineering, deployment, and optimisation of enterprise network security platforms across cloud and on-premises environments.
• Serve as the technical authority for network security infrastructure, providing guidance on solution design, architecture reviews, and engineering best practices.
• Design and implement Infrastructure as Code (IaC) solutions using Terraform and related technologies to support scalable, repeatable deployments.
• Develop and maintain automation capabilities using Python, Ansible, and similar tools to improve operational efficiency and platform reliability.
• Collaborate with Architecture, Cyber Security, and Cloud teams to define and evolve the organisation's network security strategy and standards.
• Produce and maintain high-quality technical documentation, operational procedures, and design artefacts.
• Mentor and coach engineers, promoting knowledge sharing, technical excellence, and a culture of continual improvement.

Herramientas

Fortinet

AWS Networking

Terraform

GitLab

Fortinet Firewalls

Python

Ansible

IAM security controls

Descripción del empleo

Group Overview

The TP ICAP Group is a world leading provider of market infrastructure.

Our purpose is to provide clients with access to global financial and commodities markets, improving price discovery, liquidity, and distribution of data, through responsible and innovative solutions.

Through our people and technology, we connect clients to superior liquidity and data solutions.

The Group is home to a stable of premium brands. Collectively, TP ICAP is the largest interdealer broker in the world by revenue, the number one Energy & Commodities broker in the world, the world's leading provider of OTC data, and an award winning all-to-all trading platform.

Founded in London in 1866, the Group operates from more than 60 offices in 27 countries. We are 5,200 people strong. We work as one to achieve our vision of being the world's most trusted, innovative, liquidity and data solutions specialist.

Role Overview

The Senior Network Security Infrastructure Engineer is a key technical leader responsible for the design, implementation, and operation of secure, scalable, and highly resilient network security platforms across both cloud and on-premises environments. This role combines deep technical expertise with strategic thinking to drive infrastructure modernisation, automation, and operational excellence. Working closely with Cyber Security, Cloud Engineering, Architecture, and Operations teams, you will help define and deliver the organisation's network security strategy, ensuring critical enterprise services are protected, reliable, and compliant. You will also act as a senior technical escalation point, mentor engineering colleagues, and champion engineering best practices across the technology estate.

Role Responsibilities

• Lead the design, engineering, deployment, and optimisation of enterprise network security platforms across cloud and on-premises environments.


• Serve as the technical authority for network security infrastructure, providing guidance on solution design, architecture reviews, and engineering best practices.


• Design and implement Infrastructure as Code (IaC) solutions using Terraform and related technologies to support scalable, repeatable deployments.


• Develop and maintain automation capabilities using Python, Ansible, and similar tools to improve operational efficiency and platform reliability.


• Integrate infrastructure automation and security controls into CI/CD pipelines to enable secure and reliable software and infrastructure delivery.


• Troubleshoot and resolve complex network and security infrastructure issues across development, test, and production environments.


• Drive continuous improvement initiatives focused on performance, resilience, security, and cost optimisation.


• Collaborate with Architecture, Cyber Security, and Cloud teams to define and evolve the organisation's network security strategy and standards.


• Produce and maintain high-quality technical documentation, operational procedures, and design artefacts.


• Support governance, compliance, risk management, and audit requirements, ensuring adherence to organisational and regulatory standards.


• Mentor and coach engineers, promoting knowledge sharing, technical excellence, and a culture of continual improvement.


• Participate in major incident management and problem resolution activities, providing senior technical leadership when required.

Experience / Competences

Essential

• Minimum of 5 years' experience working with Fortinet security products, certifications are desirable.


• Proven experience designing and operating AWS network security and connectivity services, including: AWS Cloud WAN


• AWS WAF


• AWS Firewall Manager


• AWS Transit Gateway


• AWS Direct Connect


• Strong expertise in Terraform and Infrastructure as Code (IaC) methodologies.


• Experience with GitLab and modern source code management (SCM) practices.


• Advanced knowledge of enterprise-class firewall technologies across both on-premises and cloud environments, including Fortinet solutions.


• Strong understanding of AWS networking services and architectures, including VPNs, DNS, load balancing, routing, and security controls.


• Deep understanding of networking protocols and technologies, including TCP/IP, BGP, OSPF, routing, switching, and network segmentation.


• A deep and demonstrable understanding of digital certificates along with modern cryptography.


• Strong understanding of 802.1X technology and patterns.


• A working understanding of VPN and encapsulation technologies.


• A good understanding of identity based authentication and authorisation, including IAM security controls in cloud environments.


• Proven experience implementing network security controls, security best practices, and cloud-native security solutions.


• Experience developing infrastructure and security automation using Python, Ansible, or equivalent technologies.


• Exceptional troubleshooting and analytical skills, with the ability to diagnose and resolve complex technical issues under pressure.