Lead Infrastructure Engineer; Cloud & Compute Security

LOCATION: Leeds, Bristol, Edinburgh, Manchester

HOURS: Full-time - 35 hours

WORKING PATTERN: Our work style is hybrid, which involves spending at least two days per week, or 40% of our time, at one of our office sites. Colleagues with disabilities can be supported with workplace adjustments including hybrid working expectations in line with our Flexibility Works policy.

The Chief Security Office (CSO) is a vital part of delivering the Group's vision of putting customers at the heart of everything we do, helping Britain prosper and protecting the Group and customers from security threats. We're responsible for defining and communicating Lloyds Banking Group's security strategy and providing a range of critical Enterprise Security Services which not only operate key controls that keep the Group safe but also enable the digital transformation agenda of the wider organisation.

As the Group continues its transformation towards its technology vision of being the UK's biggest fintech, CSO is evolving into a highly engineering-led function, focused on delivering security as a platform that supports and accelerates the wider business - increasing automation, improving visibility of risk, and strengthening protection across a complex, multi-cloud environment.

The Cloud and Compute Security Lab sits at a critical inflection point in that journey and is seeking a dynamic Lead Infrastructure Engineer to join us. We are building a Unified Exposure Management (UEM) platform from the ground up - redefining how security is engineered, delivered, and operated. This is not about maintaining existing controls; it's about creating a modern, cloud-native security ecosystem, fully defined through Infrastructure as Code and delivered via CI/CD.

This platform will operate at enterprise scale, monitoring and protecting thousands of workloads across multi-cloud environments, underpinning critical banking services relied on by millions of customers every day. We are embedding security directly into the engineering lifecycle, establishing contribution and federation models that allow teams to build with us, not around us. Using modern developer tooling, we are creating a platform that scales, adapts, and evolves alongside the organisation, using AI as an extra pair of hands.

The impact is real and immediate - improving resilience, reducing exposure to threats, and strengthening the trust customers place in the bank. This is an opportunity to shape the future of security in a large-scale fintech - not just operate within it.

• Strong engineering mindset with the ability to build and scale systems, not just operate them
• Experience working in cloud environments (GCP and/or Azure)
• Understanding of compute platforms, including Windows and/or RHEL
• Exposure to Kubernetes and container-based architectures
• Excellent Dev Ops engineering skills using Infrastructure as Code (Terraform) and CI/CD pipelines (Harness)
• Experience with Large Language Models and Agentic automation
• Familiarity with modern developer tooling and platform engineering concepts
• Ability to work in ambiguous environments and help define direction
• Strong communication and collaboration skills, with the ability to influence and enable teams across a large organisation

• Experience across multiple cloud or operating system domains (GCP, Azure, Windows, RHEL)
• Deep expertise in Kubernetes or container security
• Experience building or contributing to platform engineering or security platforms
• Knowledge of exposure management, vulnerability management, or security posture tooling

You don't need to tick every box. We are more interested in how you think, how you approach problems, and your ability to build and evolve systems in a fast-moving environment.

• Shape a greenfield UEM security platform at true enterprise scale
• Work on systems that directly protect customer-facing banking services used by millions
• Influence how security is delivered across one of the UK's largest financial institutions
• Be part of a team redefining what "good" looks like for modern security engineering