ZTNA Infrastructure Engineer – Secure Access & Cloud Net

Lloyds Banking Group; Wellington; Hybrid; GBP 49,000 - 55,000; Full time

Benefits offered by this job

Pension up to 15%

Annual bonus

Share schemes

Discounted shopping

28 days holiday + BH

Wellbeing initiatives

Job summary

Lloyds Banking Group is seeking an Infrastructure Engineer (ZTNA) to design, evolve and operate our Zero Trust Network Access platforms, protecting access to critical applications through identity-aware controls. You will work with automation and secure-by-default design to improve resilience and security.

Day-to-day you’ll operate with autonomy, using Infrastructure-as-Code, CI/CD and policy-as-code to modernise the platform, enhance observability and contribute to technical direction, while

Qualifications

• Proven engineering mindset with hands-on experience across ZTNA, remote access or identity-aware access technologies.
• Demonstrable experience in Cloud network security (Azure and GCP).
• Strong automation and scripting skills (Python preferred).
• Practical experience using Infrastructure-as-Code tools (Terraform preferred).
• Experience working with modern CI/CD pipelines.
• Strong understanding of networking fundamentals including TCP/IP, DNS and TLS.
• Knowledge of identity protocols such as SAML and OIDC.
• Understanding of Zero Trust principles.

Responsibilities

• Design, evolve and operate ZTNA platforms to protect access.
• Improve resilience, performance and security via automation and secure-by-default design.
• Engineer using IaC, CI/CD and policy-as-code; support incident diagnostics and on-call resilience.

Skills

ZTNA / zero trust concepts

Remote access / identity-aware access

Cloud network security (Azure, GCP)

Automation and scripting (Python)

Infrastructure-as-Code (Terraform)

CI/CD pipelines

Networking fundamentals (TCP/IP, DNS,

Tools

Terraform

CI/CD tooling

Job description

Lloyds Banking Group is seeking an Infrastructure Engineer (ZTNA) to design, evolve and operate our Zero Trust Network Access platforms, protecting access to critical applications through identity-aware controls. You will work with automation and secure-by-default design to improve resilience and security.

Day-to-day you’ll operate with autonomy, using Infrastructure-as-Code, CI/CD and policy-as-code to modernise the platform, enhance observability and contribute to technical direction, while