SERVICE MESH - Security Design Engineer

Security Design Engineer (Service Mesh) - 6 Month Contract - INSIDE IR35 - London, Sheffield, Manchester, Birmingham - No Sponsorship Available

In order to make an application, simply read through the following job description and make sure to attach relevant documents.

IMPORTANT - Please ensure your CV highlights your experience with Service Mesh technologies, Network Security, and any Software experience. These are essential skills for this role

Project Overview

We are looking for an experienced Network Security Architect / Security Engineer with strong Service Mesh experience to support a major security transformation within a complex enterprise environment.

This is a Network Security role, not a DevOps, SRE or Platform Engineering position.

The core focus is the security architecture surrounding Service Mesh and modern microservices environments. We need someone who brings a genuine background in network security, understands technologies such as firewalls, proxies, IDS/IPS, segmentation and Layer Seven security, and has subsequently applied those principles within Kubernetes and Service Mesh environments.

You will also need a good understanding of software and the Software Development Lifecycle, ideally gained through working closely with software-development teams or within software-led organisations.

Service Mesh – Core Requirement

Service Mesh experience is central to this role and should be clearly demonstrated in your professional experience.

We are particularly interested in experience with:

Istio
Envoy
Linkerd
Kubernetes / OpenShift
Service-to-service communication
mTLS and inter-service encryption
Service-to-service authentication and authorisation
Service Mesh security policies
Ingress and egress security
Traffic routing and traffic policies
Workload identity and trust between services
Observability within Service Mesh environments
Microservices securityYou should be comfortable explaining how traditional network-security principles translate into a modern environment where large numbers of microservices communicate dynamically across Kubernetes infrastructure. xsabvtc

Network Security – Core Requirement

The successful person will come from a Network Security background and should have practical experience across a broad range of network-security technologies and controls.

This should include several of the following:

Enterprise firewalls / Next-Generation Firewalls
Palo Alto, Check Point, Fortinet, Cisco Firepower/ASA or Juniper SRX
IDS / IPS
Network segmentation and micro-segmentation
Reverse proxies
Forward proxies
Network Access Control Lists and security policies
Layer Seven firewalling
WAF
DDoS protection
VPN / IPsec
Secure ingress and egress
Zero Trust networking
SASE / ZTNA
Load balancing and application delivery
F5 / equivalent technologies
Cloud network security across AWS, Azure and/or GCPWe need somebody who understands the fundamentals of how network traffic is controlled, inspected, segmented and protected, and who can apply that knowledge to ...