{"id":2722733,"url":"https://alion.io/job/tp-icap-group-senior-network-security-infrastructure-engineer","title":"Senior Network Security Infrastructure Engineer","company":{"id":172489,"name":"TP ICAP Group","domain":"tpicap.com","url":"https://alion.io/company/tp-icap","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":76,"open_postings":17,"ghost_share":0,"stale_share":0.941,"repost_share":0,"time_to_fill_p50_days":40,"computed_at":"2026-10-17T05:46:00Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":81000,"max_usd":155000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":54},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"CI/CD","optional":false},{"name":"Incident Management","optional":false},{"name":"Python","optional":false},{"name":"Terraform","optional":false},{"name":"AWS","optional":true},{"name":"AWS WAF","optional":true},{"name":"BGP","optional":true},{"name":"DNS","optional":true},{"name":"GitLab","optional":true},{"name":"IAM","optional":true},{"name":"OSPF","optional":true},{"name":"SOC 2","optional":true},{"name":"TCP/IP","optional":true},{"name":"VPN","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-10-15T00:00:00Z","employer_posted_date":"2026-10-15","last_verified_at":"2026-10-16T20:25:39Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Group Overview\nThe TP ICAP Group is a world leading provider of market infrastructure.\nOur purpose is to provide clients with access to global financial and commodities markets, improving price discovery, liquidity, and distribution of data, through responsible and innovative solutions.\nThrough our people and technology, we connect clients to superior liquidity and data solutions.\nThe Group is home to a stable of premium brands. Collectively, TP ICAP is the largest interdealer broker in the world by revenue, the number one Energy & Commodities broker in the world, the world’s leading provider of OTC data, and an award winning all-to-all trading platform.\nFounded in London in 1866, the Group operates from more than 60 offices in 27 countries. We are 5,200 people strong. We work as one to achieve our vision of being the world’s most trusted, innovative, liquidity and data solutions specialist.\nRole Overview\nThe Senior Network Security Infrastructure Engineer is a key technical leader responsible for the design, implementation, and operation of secure, scalable, and highly resilient network security platforms across both cloud and on-premises environments. This role combines deep technical expertise with strategic thinking to drive infrastructure modernisation, automation, and operational excellence. Working closely with Cyber Security, Cloud Engineering, Architecture, and Operations teams, you will help define and deliver the organisation's network security strategy, ensuring critical enterprise services are protected, reliable, and compliant. You will also act as a senior technical escalation point, mentor engineering colleagues, and champion engineering best practices across the technology estate.\nRole Responsibilities\nLead the design, engineering, deployment, and optimisation of enterprise network security platforms across cloud and on-premises environments.\nServe as the technical authority for network security infrastructure, providing guidance on solution design, architecture reviews, and engineering best practices.\nDesign and implement Infrastructure as Code (IaC) solutions using Terraform and related technologies to support scalable, repeatable deployments.\nDevelop and maintain automation capabilities using Python, Ansible, and similar tools to improve operational efficiency and platform reliability.\nIntegrate infrastructure automation and security controls into CI/CD pipelines to enable secure and reliable software and infrastructure delivery.\nTroubleshoot and resolve complex network and security infrastructure issues across development, test, and production environments.\nDrive continuous improvement initiatives focused on performance, resilience, security, and cost optimisation.\nCollaborate with Architecture, Cyber Security, and Cloud teams to define and evolve the organisation's network security strategy and standards.\nProduce and maintain high-quality technical documentation, operational procedures, and design artefacts.\nSupport governance, compliance, risk management, and audit requirements, ensuring adherence to organisational and regulatory standards.\nMentor and coach engineers, promoting knowledge sharing, technical excellence, and a culture of continuous improvement.\nParticipate in major incident management and problem resolution activities, providing senior technical leadership when required.\nExperience / Competences\nEssential\nMinimum of 5 years’ experience working with Fortinet security products, certifications are desirable.\nProven experience designing and operating AWS network security and connectivity services, including:AWS Cloud WAN\nAWS WAF\nAWS Firewall Manager\nAWS Transit Gateway\nAWS Direct Connect\n\nStrong expertise in Terraform and Infrastructure as Code (IaC) methodologies.\nExperience with GitLab and modern source code management (SCM) practices.\nAdvanced knowledge of enterprise-class firewall technologies across both on-premises and cloud environments, including Fortinet solutions.\nStrong understanding of AWS networking services and architectures, including VPNs, DNS, load balancing, routing, and security controls.\nDeep understanding of networking protocols and technologies, including TCP/IP, BGP, OSPF, routing, switching, and network segmentation.\nA deep and demonstrable understanding of digital certificates along with modern cryptography.\nStrong understanding of 802.1X technology and patterns.\nA working understanding of VPN and encapsulation technologies.\nA good understanding of identity based authentication and authorisation, including IAM security controls in cloud environments.\nProven experience implementing network security controls, security best practices, and cloud-native security solutions.\nExperience developing infrastructure and security automation using Python, Ansible, or equivalent technologies.\nExceptional troubleshooting and analytical skills, with the ability to diagnose and resolve complex technical issues under pressure.\nStrong communication and stakeholder management skills, with the ability to collaborate effectively across technical and business teams.\nDemonstrated ability to work independently while contributing successfully within a collaborative engineering environment.\nDesired\nDegree in Computer Science, Information Technology, Cyber Security, Engineering, or a related discipline, or equivalent industry experience.\nAWS certifications, such as AWS Certified Advanced Networking - Specialty or AWS Certified Security - Specialty.\nExperience with network observability, monitoring, and telemetry platforms.\nExperience implementing DevOps practices and CI/CD pipelines within infrastructure environments.\nKnowledge of Site Reliability Engineering (SRE) principles and operational excellence frameworks.\nWorking knowledge of information security frameworks and compliance standards, including ISO/IEC 27001 and SOC 2, with an understanding of their application within enterprise environments.\nExperience working within financial services or other highly regulated environments.\nFamiliarity with Zero Trust networking concepts and modern cloud security architectures.\nRole Band & Level\nManager / 6 \nNot The Perfect Fit?\nConcerned that you may not meet the criteria precisely? At TP ICAP, we wholeheartedly believe in fostering inclusivity and cultivating a work environment where everyone can flourish, regardless of your personal or professional background. If you are enthusiastic about this role but find that your experience doesn't align perfectly with every aspect of the job description, we strongly encourage you to apply. You may be the ideal candidate for this position or another opportunity within our organisation. Our dedicated Talent Acquisition team is here to assist you in recognising how your unique skills and abilities can be a valuable contribution. Don't hesitate to take the leap and explore the possibilities. Your potential is what truly matters to us.\nCompany Statement\nWe know that the best innovation happens when diverse people with different perspectives and skills work together in an inclusive atmosphere. That's why we're building a culture where everyone plays a part in making people feel welcome, ready and willing to contribute. TP ICAP Accord - our Employee Network - is a central to this. As well as representing specific groups, TP ICAP Accord helps increase awareness, collaboration, shares best practice, and holds our firm to account for driving continuous cultural improvement.\nLocation\nUK - 135 Bishopsgate - London","description_format":"text","description_chars":7507,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Stock Exchanges & Market Infrastructure","Financial Data & Market Intelligence"],"lifecycle":[{"event":"open","at":"2026-10-16T15:21:41Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Senior or Specialist Worker, Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Business Mobility: Senior or Specialist Worker; Skilled Worker","cap_exempt":false,"checked_at":"2026-10-17T06:21:15+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":2,"expected_fill_days":40,"reasons":["conf:9","stale_co","velocity","win:early"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/tp-icap-group-senior-network-security-infrastructure-engineer","json_url":"https://alion.io/job/tp-icap-group-senior-network-security-infrastructure-engineer.json","meta":{"generated_at":"2026-10-17T07:17:52Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10011,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":172489},"rest":"https://alion.io/mcp/rest/get_company?id=172489"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftp-icap-group-senior-network-security-infrastructure-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftp-icap-group-senior-network-security-infrastructure-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftp-icap-group-senior-network-security-infrastructure-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tp-icap-group-senior-network-security-infrastructure-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftp-icap-group-senior-network-security-infrastructure-engineer"}]}