Infrastructure Engineer (WAF)

You'll be a key engineer responsible for designing, evolving and operating our Web Application Firewall (WAF) platforms, protecting critical customer-facing services at scale. You'll work with modern engineering practices including automation, and secure-by-default design to improve resilience, performance and security across our edge, datacentre and cloud environments. This role offers real scope to influence technical direction, uplift engineering standards, and develop our WAF and wider Layer 7 security services. Day to day you'll operate with a high degree of autonomy and technical influence. Your responsibilities will include:

• Engineering new WAF capabilities using Infrastructure-as-Code, CI/CD pipelines and policy-as-code approaches to deliver secure, repeatable and scalable outcomes
• Playing a key role in platform modernisation and service improvements, including refactoring, automation and the reduction of technical debt
• Driving observability and operational insight by improving monitoring, alerting and telemetry to strengthen platform reliability and incident response
• Supporting major incident diagnostics, partnering closely with Security Engineering, Networks and Cloud teams
• Embedding secure-by-design patterns and guardrails, ensuring controls are codified, consistent and easy for platform consumers to adopt
• Producing high-quality engineering documentation, including standards, patterns, platform guidance and runbooks that enable self-service and repeatability
• Participating in the on-call rota, contributing to the operational resilience of critical services (with additional compensation)
Why Join us? If you think all banks are the same, you're wrong. We're a pioneering, fast-changing business that's shaping finance as a force for good. If you're after a role where you can have an impact and do the best work of your career, you've just found it In this role, you'll have the chance to:
• Shape the future of WAF and Web Application Security capabilities across Lloyds Banking Group
• Contribute to engineering standards, patterns and guardrails used across multiple teams and platforms
• Work alongside highly skilled engineers in a culture that values modern engineering, automation and continuous improvement
  
  A proven engineering mentality, with hands-on experience across edge, on-prem and cloud-native WAF technologies
• Strong automation and scripting skills (Python preferred), with practical experience using Infrastructure-as-Code tools (Terraform preferred) and modern CI/CD pipelines
• Solid understanding of networking and web fundamentals, including HTTP/S, DNS, TLS and platform security concepts
• Ability to lead complex technical investigations, diagnose issues under pressure and guide others toward robust solutions
• Confidence to influence engineering decisions and contribute to strategic technical direction
And any experience of these would be great…
• Knowledge of Application Security, API Security, Bot Protection and Layer 7 DDoS
• Professional-level cloud certifications and/or recognised security or network engineering accreditations
We know that great talent comes from many backgrounds. Whilst this job advert may reference specific years of experience, we recognise that skills are developed in many ways, so if you have relevant, transferable experience, we encourage you to apply.

We also offer a wide-ranging benefits package, which includes…
• A generous pension contribution of up to 15%
• An annual bonus award, subject to Group performance
• Share schemes including free shares
• Benefits you can adapt to your lifestyle, such as discounted shopping
• 28 days' holiday, with bank holidays on top
• A range of wellbeing initiatives and generous parental leave policies