Infrastructure Engineer (WAF)

JOB TITLE: Infrastructure Engineer (WAF)

SALARY: £48,987 - £55,000 per annum

LOCATION: Manchester, Leeds, Edinburgh,

HOURS: Full-time - 35 hours

WORKING PATTERN: Our work style is hybrid, which involves spending at least two days per week, or 40% of our time, at one of our office sites. Colleagues with disabilities can be supported with workplace adjustments including hybrid working expectations in line with our Flexibility Works policy.

What you'll be doing…

You'll be a key engineer responsible for designing, evolving and operating our Web Application Firewall (WAF) platforms, protecting critical customer‑facing services at scale.

You'll work with modern engineering practices including automation, and secure‑by‑default design to improve resilience, performance and security across our edge, datacentre and cloud environments. This role offers real scope to influence technical direction, uplift engineering standards, and develop our WAF and wider Layer 7 security services.

Day to day you'll operate with a high degree of autonomy and technical influence. Your responsibilities will include:

• Engineering new WAF capabilities using Infrastructure‑as‑Code, CI/CD pipelines and policy‑as‑code approaches to deliver secure, repeatable and scalable outcomes

• Playing a key role in platform modernisation and service improvements, including refactoring, automation and the reduction of technical debt

• Driving observability and operational insight by improving monitoring, alerting and telemetry to strengthen platform reliability and incident response

• Supporting major incident diagnostics, partnering closely with Security Engineering, Networks and Cloud teams

• Embedding secure‑by‑design patterns and guardrails, ensuring controls are codified, consistent and easy for platform consumers to adopt

• Producing high‑quality engineering documentation, including standards, patterns, platform guidance and runbooks that enable self‑service and repeatability

• Participating in the on‑call rota, contributing to the operational resilience of critical services (with additional compensation)

Why Join us?

If you think all banks are the same, you're wrong. We're a pioneering, fast-changing business that's shaping finance as a force for good. If you're after a role where you can have an impact and do the best work of your career, you've just found it

In this role, you'll have the chance to:

• Shape the future of WAF and Web Application Security capabilities across Lloyds Banking Group

• Contribute to engineering standards, patterns and guardrails used across multiple teams and platforms

• Work alongside highly skilled engineers in a culture that values modern engineering, automation and continuous improvement

What we're looking for?

• A proven engineering mentality, with hands‑on experience across edge, on‑prem and cloud‑native WAF technologies

• Strong automation and scripting skills (Python preferred), with practical experience using Infrastructure‑as‑Code tools (Terraform preferred) and modern CI/CD pipelines

• Solid understanding of networking and web fundamentals, including DNS, TLS and platform security concepts

• Ability to lead complex technical investigations, diagnose issues under pressure and guide others toward robust solutions

• Confidence to influence engineering decisions and contribute to strategic technical direction

And any experience of these would be great…

• Knowledge of Application Security, API Security, Bot Protection and Layer 7 DDoS

• Professional‑level cloud certifications and/or recognised security or network engineering accreditations

We know that great talent comes from many backgrounds. Whilst this job advert may reference specific years of experience, we recognise that skills are developed in many ways, so if you have relevant, transferable experience, we encourage you to apply.

This is a place for you…

We offer reasonable workplace adjustments for colleagues with disabilities, including flexibility in office attendance, location and working patterns. And, as a Disability Confident Leader, we guarantee interviews for a fair and proportionate number of applicants who meet the minimum criteria for the role with a disability, long-term health or neurodivergent condition through the Disability Confident Scheme.

We also offer a wide-ranging benefits package, which includes…

• A generous pension contribution of up to 15%

• An annual bonus award, subject to Group performance

• Share schemes including free shares

• Benefits you can adapt to your lifestyle, such as discounted shopping

• 28 days' holiday, with bank holidays on top

• A range of wellbeing initiatives and generous parental leave policies

Ready for a career where you'll learn and thrive? Apply today and find out more.

Proud member of the Disability Confident employer scheme

Disability Confident

About Disability Confident

A Disability Confident employer will generally offer an interview to any applicant that declares they have a disability and meets the minimum criteria for the job as defined by the employer. It is important to note that in certain recruitment situations such as high-volume, seasonal and high-peak times, the employer may wish to limit the overall numbers of interviews offered to both disabled people and non-disabled people. For more details please go to Disability Confident .