End Date
Tuesday 28 July 2026Salary Range
£48,987 - £54,430We support flexible working – click here for more information on flexible working options
Flexible Working Options
Hybrid Working, Job ShareJob Description Summary
.Job Description
JOB TITLE: Infrastructure Engineer (ZTNA)
SALARY: £48,987 - £55,000
LOCATION: Edinburgh, Leeds, Manchester
HOURS: Full-time
WORKING PATTERN: Our work style is hybrid, which involves spending at least two days per week, or 40% of our time, at one of our office sites. Colleagues with disabilities can be supported with workplace adjustments including hybrid working expectations in line with our Flexibility Works policy.
What you’ll be doing…
You’ll be a key engineer responsible for designing, evolving and operating our Zero Trust Network Access (ZTNA) platforms, protecting access to critical applications and services through modern identity‑aware and context‑driven security controls. You’ll work using modern engineering practices such as automation and secure‑by‑default design to improve resilience, performance and security. This role offers real scope to influence technical direction, uplift engineering standards, and develop our ZTNA and wider Zero Trust capabilities.
Day to day, you’ll operate with a high degree of autonomy and technical influence, engineering new capabilities using Infrastructure‑as‑Code, CI/CD and policy‑as‑code approaches, driving platform modernisation, improving observability and telemetry, supporting major incident diagnostics, embedding Zero Trust principles, and producing high‑quality engineering documentation. You’ll also participate in the on‑call rota, contributing to the operational resilience of critical access services.
Why Join us?
If you think all banks are the same, you’re wrong. We’re a pioneering, fast-changing business that’s shaping finance as a force for good. If you’re after a role where you can have an impact and do the best work of your career, you’ve just found it
What we’re looking for?
Proven engineering mindset with hands-on experience across ZTNA, remote access or identity‑aware access technologies across on‑prem and cloud
Demonstrable experience in Cloud network security (preferably Azure and GCP)
Strong automation and scripting skills (Python preferred)
Practical experience using Infrastructure‑as‑Code tools (Terraform preferred)
Experience working with modern CI/CD pipelines
Strong understanding of networking fundamentals including TCP/IP, DNS and TLS
Knowledge of identity protocols such as SAML and OIDC
Understanding of Zero Trust principles
Ability to lead complex technical investigations and diagnose issues under pressure
Confidence to influence engineering decisions and contribute to technical direction
And it would be great if you had any of the following...
Knowledge of Identity & Access Management (IAM)
Experience with device posture and endpoint security
Understanding of secure application access patterns
Experience with Zero Trust architectures
Knowledge of federation and user‑to‑application segmentation
Professional cloud certifications
Security, identity or network engineering accreditations
This is a place for you…
Our ambition is to be the leading UK business for diversity, equity and inclusion, supporting our customers, colleagues and communities. We are committed to creating an environment in which everyone can thrive, learn and develop.
We were one of the first major organisations to set goals on diversity in senior roles, create a menopause health package, and launch a dedicated Working with Cancer initiative. We offer reasonable workplace adjustments for colleagues with disabilities, including flexibility in office attendance, location and working patterns. As a Disability Confident Leader, we guarantee interviews for a fair and proportionate number of applicants who meet the minimum criteria for the role and have a disability, long-term health or neurodivergent condition, through the Disability Confident Scheme.
We provide reasonable adjustments throughout the recruitment process to reduce or remove barriers - just let us know what you need.
We also offer a wide-ranging benefits package, which includes…
A generous pension contribution of up to 15%
An annual bonus award, subject to Group performance
Share schemes including free shares
Benefits you can adapt to your lifestyle, such as discounted shopping
28 days’ holiday, with bank holidays on top
A range of wellbeing initiatives and generous parental leave policies
Ready for a career where you’ll learn and thrive? Apply today and find out more.
At Lloyds Banking Group, we're driven by a clear purpose; to help Britain prosper. Across the Group, our colleagues are focused on making a difference to customers, businesses and communities. With us you'll have a key role to play in shaping the financial services of the future, whilst the scale and reach of our Group means you'll have many opportunities to learn, grow and develop.
We keep your data safe. So, we'll only ever ask you to provide confidential or sensitive information once you have formally been invited along to an interview or accepted a verbal offer to join us which is when we run our background checks. We'll always explain what we need and why, with any request coming from a trusted Lloyds Banking Group person.
We're focused on creating a values-led culture and are committed to building a workforce which reflects the diversity of the customers and communities we serve. Together we’re building a truly inclusive workplace where all of our colleagues have the opportunity to make a real difference.
Skills Required
- Hands-on experience with ZTNA, remote access or identity-aware access technologies across on-prem and cloud
- Cloud network security (preferably Azure and GCP)
- Strong automation and scripting skills (Python preferred)
- Practical experience using Infrastructure-as-Code tools (Terraform preferred)
- Experience working with modern CI/CD pipelines
- Strong understanding of networking fundamentals including TCP/IP, DNS and TLS
- Knowledge of identity protocols such as SAML and OIDC
- Understanding of Zero Trust principles
- Ability to lead complex technical investigations and diagnose issues under pressure
- Confidence to influence engineering decisions and contribute to technical direction
- Knowledge of Identity & Access Management (IAM)
- Experience with device posture and endpoint security
- Understanding of secure application access patterns
- Experience with Zero Trust architectures
- Knowledge of federation and user-to-application segmentation
- Professional cloud certifications
- Security, identity or network engineering accreditations
What We Do
Our purpose is Helping Britain Prosper. We do this by creating a more sustainable and inclusive future for people and businesses, shaping finance as a force for good. We're part of an ever-changing industry and are currently on a journey to shape the financial services of the future, whilst supporting our customers’ changing needs. The scale and reach of our Group means we can offer a broad range of opportunities to learn, grow and develop. Our values-led culture and approach to inclusion and diversity means we can all make a real difference together.
