Lead Infrastructure Engineer (Server Security & Secure Browser)

• The Chief Security Office (CSO) is a vital part of delivering the Group’s vision of putting customers at the heart of everything we do, helping Britain prosper and protecting the Group and our customers from security threats
• We’re responsible for defining and communicating Lloyds Banking Group’s security strategy and providing critical Enterprise Security Services that not only operate the controls keeping the Group safe whilst also enabling the digital transformation agenda of the wider organisation
• The Unified Endpoint Security Lab secures colleague devices, server endpoints and secure web access services across the organisation
• The team engineers, delivers and operates security capabilities including endpoint protection, EDR, secure enterprise browsers, device compliance and data protection
• Through automation, modern engineering practices and close collaboration across technology and security teams, the lab delivers secure, resilient and user-focused security services
• The team is also driving the modernisation of endpoint and access security through automation, cloud-native technologies, policy-as-code and engineering-led practices that improve both security outcomes and operational efficiency
• As we move from ClickOps to DevOps, the role requires hands-on code development to automate, improve, and scale how we lead and deliver our services
• Line manage and mentor an engineering team, encouraging a high-performance culture. Help them develop skills to adopt modern engineering practices. This includes transitioning from ClickOps to DevOps by using automation, delivery through code, and continuous improvement
• Providing hands-on DevOps engineering expertise, embedding modern practices such as Infrastructure as Code, Policy as Code, CI/CD, API‑driven automation, automated testing, and observability into all solutions
• Own and drive the technical product roadmap for infrastructure and tooling across the secure enterprise browser and server security products and services, in conjunction with the Product Owners
• Ensure the team adopts agile ways of working, continuously focusing on delivering value, improving flow and responding effectively to changing priorities
• Maintain strong relationships with internal product teams and external vendors to ensure service quality
• Balance usability and security to ensure effective end-user experiences while maintaining our security posture

Benefits

• A generous holiday allowance: You’ll be eligible for a minimum of 22 days holiday (excluding bank holidays), rising to 30 days based on length of service and grade.
• A flexible way of working: Whether you want flexibility over your location or when you log on, together we can create an approach that works for you and for the business.
• Family leave: Up to 63 weeks of maternity or adoption leave. Statutory maternity or adoption pay is available for 39 weeks, and 20 weeks will be enhanced to the equivalent of full pay. Partners can have six weeks of fully paid paternity leave.
• Flex cash: This is 4% of your basic salary and can be used to spend on the benefits of your choice, or you can choose to take it as a cash top up in your monthly salary.
• Health insurance: Our company funded Private Medical Benefit provides all colleagues with access to good quality medical care, including accommodation, nursing care and specialist advice.
• Colleague Offers: Get discounts on everything from electrical items to cinema tickets and weekly food shopping. You can share this benefit with up to ten family members or friends.
• Financial products: Take advantage of our great financial products, some at a discounted rate, including current accounts, home and car insurance and loans.
• Share plans: Participate in Sharematch and receive matching shares of up to £45 a month from the company, and you can choose to participate in Sharesave, our combined savings and share option plan.
• Pension: We offer a generous pension plan, with all joiners being automatically enrolled in our ‘Your Tomorrow’ scheme. You can decide how much you save and get a say in where your contributions are invested.- This role is ideal for a senior engineering leader with recent, hands-on technical experience, comfortable working directly with code, automation, and modern delivery pipelines
• Experience with Server EDR vendors e.g. Microsoft Defender for Endpoint, CrowdStrike Falcon, SentinelOne etc. and secure browser tooling e.g. Island, Palo Alto Networks etc
• We know that great talent comes from many backgrounds. Whilst this job advert may reference specific years of experience, we recognise that skills are developed in many ways, so if you have relevant, transferable experience, we encourage you to apply
• Around 5 years of Leadership experience in infrastructure engineering with line management responsibilities
• A few years hands-on modern engineering experience across infrastructure, policy and config as code, with recent delivery using CI/CD pipelines and tooling such as GitHub, Terraform, Powershell and Python
• Strong technical understanding of server endpoint security on Windows and RHEL and secure browsing solutions
• Proven success in system automation, API integrations, and ongoing improvement
• Familiarity with additional endpoint security tools/platforms
• Previous experience with ticketing systems (JIRA, ServiceNow)
• Participation in an out-of-hours or on-call rota
• Relevant certifications such as Microsoft Certified: Security, Compliance, and Identity Fundamentals, CISSP, CCSP, or cloud security credentials- End Date: Tuesday 18 August 2026