Security Design Engineer

Security Design Engineer (ServiceMesh) - 6 Month Contract - INSIDE IR35 - London, Sheffield, Manchester, Birmingham - No Sponsorship Available Project Overview We are looking for an experienced Network Security Architect / Security Design Architect to support a major security transformation programme within a complex enterprise environment for a Tier 1 Bank.

The programme is focused on evolving network and application security controls to support modern, cloud-native architectures. The environment spans traditional enterprise networking and security alongside Kubernetes, microservices, service mesh, APIs, cloud platforms and modern software-development practices.

The successful individual will need to bridge the gap between traditional network security and modern application/platform architecture, working closely with network, security, platform, infrastructure and software-engineering teams.

This is not intended to be a traditional firewall-only position, nor a pure Cloud Security, DevOps or Kubernetes engineering role. The requirement is for someone with a strong network-security foundation who understands how applications are designed, developed, deployed and secured in modern distributed environments.

Key Responsibilities Network Security Architecture & Design Design and review secure enterprise network architectures across on-premise, hybrid-cloud and cloud environments. Define security architectures covering network segmentation, micro-segmentation, Zero Trust, secure connectivity and application traffic flows.

Produce and review architectural documentation including HLDs, LLDs, security patterns and design standards. Assess existing network-security architectures and identify appropriate improvements or target-state designs. Design security controls covering north-south and east-west traffic across enterprise and cloud-native environments.

Work with engineering teams to ensure network-security requirements translate into practical technical designs. Firewall & Network Security Provide architecture and technical expertise across technologies and concepts such as: Next-generation firewalls Palo Alto Check Point Cisco Firepower / ASA Fortinet IDS/IPS VPN/IPsec Secure ingress and egress Network segmentation Micro-segmentation Load balancing / application delivery Secure proxying Network policy and traffic inspectionZero Trust Apply Zero Trust principles across network, application ...

Report this job