Infrastructure Engineer (WAF)

TL;DR

Infrastructure Engineer (WAF): Designing, evolving and operating Web Application Firewall platforms protecting critical customer-facing services at scale with an accent on automation, secure-by-default design, resilience, performance and security across edge, datacentre and cloud environments. Focus on engineering new capabilities using Infrastructure-as-Code, CI/CD pipelines and policy-as-code, platform modernisation, observability improvements, incident diagnostics and embedding secure-by-design patterns.

Location: Hybrid in Manchester, Leeds, or Edinburgh (at least two days per week or 40% of time in office)

Salary: £48,987 - £55,000 per annum

Company

Pioneering fast-changing bank shaping finance as a force for good.

What you will do

• Engineer new WAF capabilities using Infrastructure-as-Code, CI/CD pipelines and policy-as-code for secure, repeatable and scalable outcomes
• Drive platform modernisation, refactoring, automation and reduction of technical debt
• Improve observability with monitoring, alerting and telemetry for platform reliability and incident response
• Support major incident diagnostics partnering with Security Engineering, Networks and Cloud teams
• Embed secure-by-design patterns and guardrails, codifying controls for easy adoption
• Produce engineering documentation including standards, patterns, guidance and runbooks for self-service
• Participate in on-call rota for operational resilience of critical services

Requirements

• Hybrid working: at least two days per week in Manchester, Leeds, or Edinburgh office
• Proven engineering mentality with hands-on experience in edge, on-prem and cloud-native WAF technologies
• Strong automation and scripting skills (Python preferred), Infrastructure-as-Code (Terraform preferred) and CI/CD pipelines
• Solid understanding of networking and web fundamentals: HTTP/S, DNS, TLS, platform security
• Ability to lead complex technical investigations, diagnose issues under pressure and guide solutions
• Confidence to influence engineering decisions and contribute to technical direction

Nice to have

• Knowledge of Application Security, API Security, Bot Protection and Layer 7 DDoS
• Professional-level cloud certifications or security/network engineering accreditations

Culture & Benefits

• Generous pension up to 15%, annual bonus, share schemes, discounted shopping
• 28 days’ holiday plus bank holidays, wellbeing initiatives, generous parental leave
• Workplace adjustments for disabilities including flexibility in office attendance
• Culture valuing modern engineering, automation, continuous improvement and high autonomy