Job Summary
Job Summary : In-scope technologies/products: \"Supporting Products within the Digital Edge & Cyber Security Product Offerings - - Mainly CDN to secure and optimise the banking infrastructure - SSL Handshake - EDGE load implementation for Web Apps\" Skillsets required: \"Understanding of Networking and Cybersecurity principles including - - DNS Resolution and IP - HTTP/S Methods, Headers, Status Codes - TCP handshake - OSI Model and Communications Framework - Attack Vectors and Methods such as DDoS, SQL, CSS, CMD Injection, LFI and Web Protocol Attacks, Botnet - Certificates and TLS Encryption - Caching and Storage on Edge - Content Delivery Network and Edge Computing - Border Gateway Protocol (BGP) and ACL\'s - Zero Trust Architecture - Load Balancing - Threat Intelligence, SIEM Data and Traffic Reporting - Proxies and Reverse Proxies to manage Ingress/Egress - Cloud infrastructure, particularly\" Scope of services: \"Mainly via CDN to secure and optimise the banking infrastructure: - Ability to carry out WAF/Security/Bot Manager Reviews Inspection of traffic to the edge and origin to determine threats/vulnerabilities - Implement Alerting and Monitoring appropriate for system errors and threats - Generation and Upload of Certificates for SSL handshake - Implement load balancing capabilities at the Edge for Web Apps - Implement path based routing of client traffic to relevant infrastructure - Proactively manage security configurations associated with hostnames by interacting with the application teams for max availability, smallest attack surface prioritisation - Ability to implement caching and storage - Ability to edit/Implement sorry pages that handle errors effectively on Net storage based on use case - Validation and implementation of different HTTP methods based on Application requirements - security implications of this and mitigation - Respond to both production and pre-production incidents in a timely manner. - Support teams on digital modernisation journey with technical debugging both in the Akamai layer and downstream infrastructure\" Role Overview The role is responsible for the engineering, configuration, deployment, and lifecycle management of technologies enabling secure colleague and machine web access. This includes involvement across SASE components, secure enterprise browsing solutions, and controls supporting both human and machine‑to‑machine traffic. As the organisation moves from ClickOps to DevOps, the role requires strong hands‑on engineering capability and experience with automation and code‑driven delivery. Key Responsibilities Technical Delivery & Engineering Excellence Contribute hands‑on DevOps engineering expertise using Infrastructure as Code, Policy as Code, CI/CD, API‑driven automation, automated testing, and observability. Build, enhance, and maintain web access protection infrastructure, including proxy services, protected corporate browsers, and web/API traffic controls. Evolve infrastructure and security patterns for internet connectivity, B2B integrations, and browser/policy control. Support product and platform teams with technical input across design, architecture, and roadmap evolution. Conduct root cause analysis and support incident remediation in collaboration with security and platform teams. Operational Delivery Implement policy‑as‑code and configuration‑as‑code approaches to remove reliance on manual portal‑based administration. Support the monitoring, stability, and continual improvement of SASE services, secure enterprise browser technologies, and machine‑traffic infrastructure. Support incident, change, and problem management activities for web access protection services. Ensure services meet resilience, documentation, compliance, and audit requirements. Collaborate with internal teams and external vendors to ensure high‑quality service delivery. Risk, Securi