SERVICE MESH - Security Design Engineer

Security Design Engineer (Service Mesh) - 6 Month Contract - INSIDE IR35 - London, Sheffield, Manchester, Birmingham - No Sponsorship Available

IMPORTANT - Please ensure your CV highlights your experience with Service Mesh technologies, Network Security, and any Software experience. These are essential skills for this role

Project Overview

We are looking for an experienced Network Security Architect / Security Engineer with strong Service Mesh experience to support a major security transformation within a complex enterprise environment.

This is a Network Security role, not a DevOps, SRE or Platform Engineering position.

The core focus is the security architecture surrounding Service Mesh and modern microservices environments. We need someone who brings a genuine background in network security, understands technologies such as firewalls, proxies, IDS/IPS, segmentation and Layer Seven security, and has subsequently applied those principles within Kubernetes and Service Mesh environments.

You will also need a good understanding of software and the Software Development Lifecycle, ideally gained through working closely with software-development teams or within software-led organisations.

Service Mesh – Core Requirement

Service Mesh experience is central to this role and should be clearly demonstrated in your professional experience.

We are particularly interested in experience with:

Istio

Envoy

Linkerd

Kubernetes / OpenShift

Service-to-service communication

mTLS and inter-service encryption

Service-to-service authentication and authorisation

Service Mesh security policies

Ingress and egress security

Traffic routing and traffic policies

Workload identity and trust between services

Observability within Service Mesh environments

Microservices securityYou should be comfortable explaining how traditional network-security principles translate into a modern environment where large numbers of microservices communicate dynamically across Kubernetes infrastructure.

Network Security – Core Requirement

The successful person will come from a Network Security background and should have practical experience across a broad range of network-security technologies and controls.

This should include several of the following:

Enterprise firewalls / Next-Generation Firewalls

Palo Alto, Check Point, Fortinet, Cisco Firepower/ASA or Juniper SRX

IDS / IPS

Network segmentation and micro-segmentation

Reverse proxies

Forward proxies

Network Access Control Lists and security policies

Layer Seven firewalling

WAF

DDoS protection

VPN / IPsec

Secure ingress and egress

Zero Trust networking

SASE / ZTNA

Load balancing and application delivery

F5 / equivalent technologies

Cloud network security across AWS, Azure and/or GCPWe need somebody who understands the fundamentals of how network traffic is controlled, inspected, segmented and protected, and who can apply that knowledge to Service Mesh and cloud-native environments.

Software and SDLC

This role sits close to software engineering teams, so you need to understand how software is designed, developed, tested, released and operated.

We are particularly interested in experience involving:

Software Development Lifecycle / SDLC

Working directly with software-development teams

Application architecture

Microservices

APIs and API security

Secure-by-design principles

Threat modelling

Software release and deployment processes

CI/CD awareness

Application security

Security requirements throughout the development lifecycleA previous software-development or software-engineering background would be particularly valuable.

You do not need to be a current software developer, but you must be technically comfortable discussing application architecture and security with development teams.

Contract Details

This is an initial 6 month engagement with a Tier 1 bank. You will be able to work in a hybrid model from London, Sheffield, Birmingham, or Manchester (3 days a week)

This will operate INSIDE IR35 - We are not able to move this to an Outside IR35 engagement

Location

London, UK

Trading as TEKsystems. Allegis Group Limited, Maxis 2, Western Road, Bracknell, RG12 1RT, United Kingdom. No. (phone number removed). Allegis Group Limited operates as an Employment Business and Employment Agency as set out in the Conduct of Employment Agencies and Employment Businesses Regulations 2003. TEKsystems is a company within the Allegis Group network of companies (collectively referred to as "Allegis Group"). Aerotek, Aston Carter, EASi, Talentis Solutions, TEKsystems, Stamford Consultants and The Stamford Group are Allegis Group brands. If you apply, your personal data will be processed as described in the Allegis Group Online Privacy Notice available at (url removed)>

To access our Online Privacy Notice, which explains what information we may collect, use, share, and store about you, and describes your rights and choices about this, please go to (url removed)>

We are part of a global network of companies and as a result, the personal data you provide will be shared within Allegis Group and transferred and processed outside the UK, Switzerland and European Economic Area subject to the protections described in the Allegis Group Online Privacy Notice. We store personal data in the UK, EEA, Switzerland and the USA. If you would like to exercise your privacy rights, please visit the "Contacting Us" section of our Online Privacy Notice at (url removed)/en-gb/privacy-notices for details on how to contact us. To protect your privacy and security, we may take steps to verify your identity, such as a password and user ID if there is an account associated with your request, or identifying information such as your address or date of birth, before proceeding with your request. If you are resident in the UK, EEA or Switzerland, we will process any access request you make in accordance with our commitments under the UK Data Protection Act, EU-U.S. Privacy Shield or the Swiss-U.S. Privacy Shield