Lead Infrastructure Engineer, Lloyds

• Leadership experience in infrastructure engineering with line management responsibilities
• Expertise in secure web platforms (e.g., Zscaler, Palo Alto, Blue Coat, McAfee Web Gateways / SkyHigh etc.) and secure enterprise browsers (e.g., Chrome Enterprise, Island, Talon, Edge for Business)
• Experience leading both human web access and machine-to-machine traffic in enterprise environments
• Familiarity with DevOps practices and CI/CD tooling
• Strong scripting and automation skills (e.g., Python, PowerShell, Terraform)
• Familiarity with security controls, data loss prevention, and browser isolation techniques
• Experience coordinating incident resolution and change processes within infrastructure or security services
• Strong stakeholder management and ability to influence product and platform strategy

Desirable

• The Chief Security Office (CSO) is a vital part of delivering the Group's vision of putting customers at the heart of everything we do, helping Britain prosper and protecting the Group and customers from security threats
• We’re responsible for defining and communicating Lloyds Banking Group's security strategy and providing a range of critical Enterprise Security Services which not only operate key controls that keep the Group safe but also enable the digital transformation agenda of the wider organisation
• Lloyds Banking Group is looking for an innovative Lead Infrastructure Engineer to craft the future approach to securing our colleague and machine web access journey within our Edge Security Lab
• This role ensures secure, compliant, and adaptable web access and partner integration throughout our estate, including secure enterprise browsing and all SASE components
• We're looking for a driven Lead Engineer with strong technical skills to guide our product development, collaborate with teams, and ensure secure, scalable solutions
• There is an expectation that this role will involve hands-on engineering, as well as line management for a group of engineers
• Lead the development, build, and ongoing improvement of web access protection infrastructure. It supports every component of a new SASE solution, such as proxy services (forward/reverse), protected corporate browsers, and API traffic controls
• Define and evolve the infrastructure and security strategy related to internet connectivity, including B2B integrations and policy controls (“proxy” / browser)
• Collaborate with product owners to shape the roadmap, with a focus on scalability, automation, and operational resilience
• Promote infrastructure-as-code principles, automation, and integration with broader security tooling
• Lead root cause investigations and remediation for major incidents, working with cross-functional security and platform teams
• Line manage and coach a team of Infrastructure Engineers, promoting a high-performance culture
• Set objectives, provide mentoring, and support continuous professional development
• Plan and lead team capacity, budgeting, and resource allocation to align with strategic goals
• Encourage experimentation, innovation, and adoption of modern engineering practices
• Open to challenges and to challenging the status quo
• Lead the incident and change management lifecycle for web access infrastructure services
• Oversee the delivery, monitoring, and continuous improvement of the SASE solution, secure enterprise browser, and machine traffic infrastructure
• Ensure services are highly resilient, documented, and aligned with compliance and audit requirements
• Maintain strong partnerships with internal product teams and external vendors to ensure service quality
• Develop and enforce security and access policies for web traffic, aligned to enterprise risk management frameworks
• Support detection and response efforts by integrating with SIEM and analytics platforms
• Maintain a strong balance between security and usability, particularly in the context of browser controls and user experience
• Participate in security reviews, risk assessments, and policy updates for web access platforms

• End Date: January 22, 2026