About this role
Salary: £61,000 - 101,000 per year
Requirements
- Proven experience in network security, SASE/SSE, identity security, security engineering, or equivalent areas.
- Strong understanding of Zero Trust principles, policy-based access, segmentation, secure egress, network and perimeter security architecture, routing and policy considerations, encryption, access control, and defense-in-depth.
- Hands-on experience with proxy and gateway architectures, including forward proxy, reverse proxy, identity-aware proxy patterns, and secure internet access controls.
- Deep knowledge of SAML, OIDC, OAuth 2.0, and JWT concepts, including signing, verification, JWKs, rotation, scopes and claims, and replay protection.
- Experience designing, delivering, or operating enterprise-scale proxy or SSE capabilities and translating security requirements into deployable patterns and operational guardrails.
- Demonstrated experience leading the effective use of approved AI-assisted software development tools, including setting validation expectations for correctness, performance, and security.
- Strong understanding of responsible AI use in engineering workflows, including data sensitivity, secure handling of inputs and outputs, and security and resiliency expectations; experience coaching engineers on safe, compliant adoption.
- Demonstrated regional execution ownership in the US or North America for infrastructure or security platforms, including prioritization, cross-team coordination, and accountability for operational and delivery outcomes.
- Experience supervising engineers and delivering cross-team remediation, modernization, and platform programs with defined scope, dependency management, milestones, and measurable outcomes.
- Experience translating security requirements into edge and perimeter-adjacent connectivity patterns, including Cisco and Arista environments, and aligning engineering decisions with operational and control requirements.
- Working knowledge of interconnect and colocation connectivity models, including Equinix Fabric, and cloud adjacency patterns such as AWS Direct Connect and AWS PrivateLink.
- Preferred: Experience integrating US delivery needs into global standards, reference architectures, and governance models while maintaining a consistent global risk posture.
- Preferred: Experience leading AI-threat-informed remediation programs and adapting standards and engineering patterns to address high-velocity reconnaissance, evolving techniques, and automated exploitation attempts.
- Preferred: Experience building enterprise-scale security engineering governance programs, including controls-by-design, exception frameworks, audit-ready traceability, and measurable risk-reduction reporting.
- Preferred: Experience operating externally facing or security enforcement services at scale, including observability, resilience testing, incident response alignment, and reducing repeat incidents and client impact.
- Preferred: Experience designing and operating hybrid edge architectures and cloud interconnect patterns across multiple cloud providers.
- Preferred: Security certifications such as CISSP, CCSP, or comparable credentials.
Responsibilities
- Lead the design, development, and technical troubleshooting of network security software solutions, applying creative approaches to complex technical problems.
- Develop secure, high-quality production code and review and debug code written by others.
- Architect and implement Zero Trust Network Access patterns for user-to-application and user-to-internet access, reducing implicit trust and lateral movement.
- Build and operate identity-aware proxy and policy enforcement capabilities for web and application access, applying identity-, device-, and context-based policies.
- Implement or integrate secure gateway and secure web gateway capabilities, including URL filtering, approved TLS inspection, malware protection, sandboxing, egress controls, and DNS security.
- Drive adoption of enterprise-authorized AI-assisted engineering practices, establish standards for validating AI outputs, and promote reusable approaches to code quality, testing, troubleshooting, and delivery.
- Use software development lifecycle tools, automation, and authorized AI-assisted development capabilities to improve delivery and operational outcomes.
- Identify opportunities to automate remediation of recurring issues and improve the stability of software applications and systems.
- Own the US perimeter, proxy, and SSE/SASE engineering roadmap and execution, including intake, prioritization, dependencies, delivery governance, and stakeholder alignment.
- Define and operationalize standards, reference architectures, and reusable patterns for perimeter and egress controls, access brokering, identity-aware access, segmentation, traffic steering, and related control integration.
- Provide engineering leadership across edge and connectivity environments, including Cisco and Arista, colocation and interconnect ecosystems, and cloud adjacency patterns.
- Establish governance mechanisms for remediation, exceptions, risk acceptance, closure workflows, auditability, and reporting that connects delivery milestones to risk reduction and resilience.
- Drive operational excellence for US perimeter, proxy, and SSE services through incident, change, and problem management; observability and resilience validation; automation; reduced client and partner impact; and technology lifecycle and modernization outcomes.
Technologies
- AI
- AWS
- Architect
- Cloud
- Cisco
- Fabric
- JWT
- Marketing
- Network
- OAuth
- SAML
- Security
- Web
- HTTP
- Support
More
We are a global financial services leader providing strategic advice and products to prominent corporations, governments, wealthy individuals, and institutional investors. Our approach to serving clients is focused on building trusted, long-term partnerships and supporting their business objectives. This Lead Software Engineer role sits within our Corporate Sector, Enterprise Technology, as part of an agile team delivering secure, stable, and scalable technology. Our Corporate Functions span areas including finance, risk, human resources, and marketing, and help prepare our businesses, clients, customers, and employees for success. We value the diverse talents of our global workforce, are an equal opportunity employer, and provide reasonable accommodations for religious practices and beliefs and for mental or physical disability needs.
last updated 46 week of 2026