Infrastructure Engineer; ZTNA)

Position: Infrastructure Engineer (ZTNA)
End Date Tuesday 06 October 2026

Salary Range
48,987 - 54,430

We support flexible working –  for more information on flexible working options

Flexible Working Options Hybrid Working, Job Share

Job Description Summary .

Job Description

JOB TITLE:

Infrastructure Engineer (ZTNA)
SALARY: 48,987 - 55,000

LOCATION:

Edinburgh, Leeds, Manchester

HOURS:

Full-time WORKING PATTERN:
Our work style is hybrid, which involves spending at least two days per week, or 40% of our time, at one of our office sites. Colleagues with disabilities can be supported with workplace adjustments including hybrid working expectations in line with our Flexibility Works policy.

What you’ll be doing …You’ll be a key engineer responsible for designing, evolving and operating our Zero Trust Network Access (ZTNA) platforms, protecting access to critical applications and services through modern identity‑aware and context‑driven security controls. You’ll work using modern engineering practices such as automation and secure‑by‑default design to improve resilience, performance and security.

This role offers real scope to influence technical direction, uplift engineering standards, and develop our ZTNA and wider Zero Trust capabilities.

Day to day, you’ll operate with a high degree of autonomy and technical influence, engineering new capabilities using Infrastructure‑as‑Code, CI/CD and policy‑as‑code approaches, driving platform modernisation, improving observability and telemetry, supporting major incident diagnostics, embedding Zero Trust principles, and producing high‑quality engineering documentation. You’ll also participate in the on‑call rota, contributing to the operational resilience of critical access services.

Why Join us?

If you think all banks are the same, you’re wrong. We’re a pioneering, fast-changing business that’s shaping finance as a force for good. If you’re after a role where you can have an impact and do the best work of your career, you’ve just found itWhat we’re looking for?

Proven engineering mindset with hands-on experience across ZTNA, remote access or identity‑aware access technologies across on‑prem and cloud

Demonstrable experience in Cloud network security (preferably Azure and GCP)
Strong automation and scripting skills (Python preferred)
Practical experience using Infrastructure‑as‑Code tools (Terraform preferred)
Experience working with modern CI/CD pipelines

Strong understanding of networking fundamentals including TCP/IP, DNS and TLSKnowledge of identity protocols such as SAML and OIDCUnderstanding of Zero Trust principles

Ability to lead complex technical investigations and diagnose issues under pressure

Confidence to influence engineering decisions and contribute to technical direction

And it would be great if you had any of the following...Knowledge of Identity & Access Management (IAM)

Experience with device posture and endpoint security

Understanding of secure application access patterns

Experience with Zero Trust architectures

Knowledge of federation and user‑to‑application segmentation

Professional cloud certifications

Security, identity or network engineering accreditations

This is a place for you…Our ambition is to be the leading UK business for diversity, equity and inclusion, supporting our customers, colleagues and communities. We are committed to creating an environment in which everyone can thrive, learn and develop.

We were one of the first major organisations to set goals on diversity in senior roles, create a menopause health package, and launch a dedicated Working with Cancer initiative. We offer reasonable workplace adjustments for colleagues with disabilities, including flexibility in office attendance, location and working patterns. As a Disability Confident Leader, we guarantee interviews for a…