Lead Infrastructure Engineer – Server Security & Secure Browser

Lloyds Banking Group (City of Edinburgh, UK) Follow 3 days ago

Apply Now

We're rebooting an icon and building the future of finance.

Find out why you should join us.

Agile Working Options

Job Share; Hybrid Working

Job description

JOB TITLE: Lead Infrastructure Engineer

SALARY: £92,701-£119,966

LOCATION(S): Edinburgh, Leeds, Manchester

HOURS

Full-time

WORKING PATTERN

Our work style is hybrid, which involves spending at least two days per week, or 40% of our time, at one of our office sites

About this opportunity

The Chief Security Office (CSO) is a vital part of delivering the Group's vision of putting customers at the heart of everything we do, helping Britain prosper and protecting the Group and our customers from security threats. We're responsible for defining and communicating Lloyds Banking Group's security strategy and providing critical Enterprise Security Services that not only operate the controls keeping the Group safe whilst also enabling the digital transformation agenda of the wider organisation.

The Unified Endpoint Security Lab secures colleague devices, server endpoints and secure web access services across the organisation. The team engineers, delivers and operates security capabilities including endpoint protection, EDR, secure enterprise browsers, device compliance and data protection. Through automation, modern engineering practices and close collaboration across technology and security teams, the lab delivers secure, resilient and user-focused security services. The team is also driving the modernisation of endpoint and access security through automation, cloud-native technologies, policy-as-code and engineering-led practices that improve both security outcomes and operational efficiency.

This role is ideal for a senior engineering leader with recent, hands‑on technical experience, comfortable working directly with code, automation, and modern delivery pipelines. As we move from ClickOps to DevOps, the role requires hands‑on code development to automate, improve, and scale how we lead and deliver our services.

What you’ll be doing:

Line manage and mentor an engineering team, encouraging a high-performance culture. Help them develop skills to adopt modern engineering practices. This includes transitioning from ClickOps to DevOps by using automation, delivery through code, and continuous improvement.
Providing hands‑on DevOps engineering expertise, embedding modern practices such as Infrastructure as Code, Policy as Code, CI/CD, API-driven automation, automated testing, and observability into all solutions.
Own and drive the technical product roadmap for infrastructure and tooling across the secure enterprise browser and server security products and services, in conjunction with the Product Owners.
Ensure the team adopts agile ways of working, continuously focusing on delivering value, improving flow and responding effectively to changing priorities.
Maintain strong relationships with internal product teams and external vendors to ensure service quality.
Balance usability and security to ensure effective end‑user experiences while maintaining our security posture.

Why join us?

Join us and, give us your best and we'll give you ours. Here, you'll make a difference to customers, you'll enjoy a fulfilling career where you're free to be yourself. Great colleagues, amazing workspaces, hybrid working and huge career opportunities-you'll find them all here.

What we’re looking for:

A few years hands‑on modern engineering experience across infrastructure, policy and config as code, with recent delivery using CI/CD pipelines and tooling such as GitHub, Terraform, Powershell and Python.
Proven success in system automation, API integrations, and ongoing improvement.
Around 5 years of Leadership experience in infrastructure engineering with line management responsibilities.
Strong technical understanding of server endpoint security on Windows and RHEL and secure browsing solutions.
Experience with Server EDR vendors e.g. Microsoft Defender for Endpoint, CrowdStrike Falcon, SentinelOne etc. and secure browser tooling e.g. Island, Palo Alto Networks etc.

And any of these would be great:

Familiarity with additional endpoint security tools/platforms.
Previous experience with ticketing systems (JIRA, ServiceNow).
Participation in an out-of-hours or on-call rota.
Relevant certifications such as Microsoft Certified: Security, Compliance, and Identity Fundamentals, CISSP, CCSP, or cloud security credentials

We know that great talent comes from many backgrounds. Whilst this job advert may reference specific years of experience, we recognise that skills are developed in many ways, so if you have relevant, transferable experience, we encourage you to apply.

This is a place for you

Our ambition is to be the leading UK business for diversity, equity and inclusion supporting our customers, colleagues and communities and we're committed to creating an environment in which everyone can thrive, learn and develop.

We also offer a wide-ranging benefits package, which includes: