Senior Network Security Engineer - Banking & Finance

Keen to join a company that champions growth and development?

Join a leading financial services organisation committed to supporting its customers, clients, communities, and colleagues at every stage of their lives. From helping people build financial confidence and purchase their first home to supporting businesses and young people as they take their first steps into adulthood, the organisation aims to provide the support and services needed to help its customers achieve their goals.

The company is looking for a Senior Network Security Engineer with hands-on experience designing and managing enterprise web security and proxy platforms, including Zscaler (ZIA/ZPA) and Blue Coat/Symantec ProxySG, within large regulated financial services environments. The role requires a strong background in secure web gateway policy, SSL inspection, and zero-trust access design, with these skills forming the core of enterprise browser security platforms such as Island.

Don’t miss out on this exciting opportunity and apply today!

Responsibilities:

• Secure web gateway architecture & operations - Design, implement, and maintain Zscaler ZIA/ZPA and/or Blue Coat ProxySG policies to control, inspect, and secure internet and internal traffic across the enterprise.
• Policy engineering & enforcement - Build and tune granular access, DLP, SSL/TLS inspection, and URL filtering policies, translating business and compliance requirements into technical rule sets - directly applicable to Island's policy engine.
• Zero-trust & access control design - Architect ZTNA solutions replacing legacy VPN/proxy chains, aligning with the identity- and context-aware access model that Island's enterprise browser extends to the endpoint.
• Incident response & threat mitigation - Investigate and respond to web-based threats, proxy log anomalies, and data exfiltration attempts, using proxy/SWG telemetry to inform detection and containment.
• Migration & platform transformation - Lead or support transitions from legacy proxy infrastructure (Blue Coat) to cloud-delivered security platforms (Zscaler), evidencing the exact "traditional-to-modern" migration mindset needed to roll out Island.

Skills/Must have:

• Zscaler ZIA/ZPA, Hands-on policy configuration, traffic forwarding (GRE/IPSec tunnels, PAC files), SSL inspection, and troubleshooting.
• Blue Coat/Symantec ProxySG,  Proxy policy authoring (CPL/VPM), content filtering, authentication integration, and appliance administration.
• SSL/TLS inspection & certificate management, Deep experience decrypting, inspecting, and re-encrypting traffic while managing trust chains - a core Island capability for in-browser inspection.
• Network security fundamentals, Firewalls, DNS security, DLP, CASB integration, and secure remote access, giving you the underlying architecture knowledge Island sits on top of.
• Regulated enterprise environment experience, Delivering security controls within compliance-heavy financial services settings (audit, risk, change control), matching Barclays' operating environment.

Salary:

• £700-£800/day 
• Inside IR35