Security Design Engineer (Service Mesh)
6 Month Contract - INSIDE IR35 - London, Sheffield, Manchester, Birmingham - No Sponsorship Available
IMPORTANT - Please ensure your CV highlights your experience with Service Mesh technologies, Network Security, and any Software experience. These are essential skills for this role
Project Overview
We are looking for an experienced Network Security Architect / Security Engineer with strong Service Mesh experience to support a major security transformation within a complex enterprise environment.
This is a Network Security role, not a DevOps, SRE or Platform Engineering position.
The core focus is the security architecture surrounding Service Mesh and modern microservices environments. We need someone who brings a genuine background in network security, understands technologies such as firewalls, proxies, IDS/IPS, segmentation and Layer Seven security, and has subsequently applied those principles within Kubernetes and Service Mesh environments.
You will also need a good understanding of software and the Software Development Lifecycle, ideally gained through working closely with software-development teams or within software-led organisations.
Service Mesh – Core Requirement
Service Mesh experience is central to this role and should be clearly demonstrated in your professional experience.
We are particularly interested in experience with:
- Istio
- Envoy
- Linkerd
- Kubernetes / OpenShift
- Service-to-service communication
- mTLS and inter-service encryption
- Service-to-service authentication and authorisation
- Service Mesh security policies
- Ingress and egress security
- Traffic routing and traffic policies
- Workload identity and trust between services
- Observability within Service Mesh environments
- Microservices security
You should be comfortable explaining how traditional network-security principles translate into a modern environment where large numbers of microservices communicate dynamically across Kubernetes infrastructure.
Network Security – Core Requirement
The successful person will come from a Network Security background and should have practical experience across a broad range of network-security technologies and controls.
We need this to include several of the following:
- Enterprise firewalls / Next-Generation Firewalls
- Palo Alto, Check Point, Fortinet, Cisco Firepower/ASA or Juniper SRX
- IDS / IPS
- Network segmentation and micro-segmentation
- Reverse proxies
- Forward proxies
- Network Access Control Lists and security policies
- Layer Seven firewalling
- WAF
- DDoS protection
- VPN / IPsec
- Secure ingress and egress
- Zero Trust networking
- SASE / ZTNA
- Load balancing and application delivery
- F5 / equivalent technologies
- Cloud network security across AWS, Azure and/or GCP
We need somebody who understands the fundamentals of how network traffic is controlled, inspected, segmented and protected, and who can apply that knowledge to Service Mesh and cloud-native environments.
Software and SDLC
This role sits close to software engineering teams, so you need to understand how software is designed, developed, tested, released and operated.
We are particularly interested in experience involving:
- Software Development Lifecycle / SDLC
- Working directly with software-development teams
- Application architecture
- Microservices
- APIs and API security
- Secure-by-design principles
- Threat modelling
- Software release and deployment processes
- CI/CD awareness
- Application security
- Security requirements throughout the development lifecycle
A previous software-development or software-engineering background would be particularly valuable.
You do not need to be a current software developer, but you must be technically comfortable discussing application architecture and security with development teams.
Contract Details
This is an initial 6 month engagement with a Tier 1 bank. You will be able to work in a hybrid model from London, Sheffield, Birmingham, or Manchester (3 days a week). This will operate INSIDE IR35 - We are not able to move this to an Outside IR35 engagement.
Location
London, Sheffield, Manchester, Birmingham
#J-18808-Ljbffr
SERVICE MESH - Security Design Engineer in City of London employer: Teksystems
As an Azure Solution Architect with us, you'll thrive in a dynamic work culture that prioritises innovation and collaboration. We offer competitive benefits, including professional development opportunities to enhance your skills in cloud technologies, all while working in a vibrant location that fosters creativity and teamwork. Join us to be part of a forward-thinking company that values your contributions and supports your career growth.
