Group Overview

The TP ICAP Group is a world leading provider of market infrastructure.

Our purpose is to provide clients with access to global financial and commodities markets, improving price discovery, liquidity, and distribution of data, through responsible and innovative solutions.

Through our people and technology, we connect clients to superior liquidity and data solutions.

The Group is home to a stable of premium brands. Collectively, TP ICAP is the largest interdealer broker in the world by revenue, the number one Energy & Commodities broker in the world, the world’s leading provider of OTC data, and an award winning all-to-all trading platform.

Founded in London in 1866, the Group operates from more than 60 offices in 27 countries.  We are 5,200 people strong.  We work as one to achieve our vision of being the world’s most trusted, innovative, liquidity and data solutions specialist.

Role Overview

The Senior Network Security Infrastructure Engineer is a key technical leader responsible for the design, implementation, and operation of secure, scalable, and highly resilient network security platforms across both cloud and on-premises environments. This role combines deep technical expertise with strategic thinking to drive infrastructure modernisation, automation, and operational excellence. Working closely with Cyber Security, Cloud Engineering, Architecture, and Operations teams, you will help define and deliver the organisation's network security strategy, ensuring critical enterprise services are protected, reliable, and compliant. You will also act as a senior technical escalation point, mentor engineering colleagues, and champion engineering best practices across the technology estate.

Role Responsibilities

• Lead the design, engineering, deployment, and optimisation of enterprise network security platforms across cloud and on-premises environments.
• Serve as the technical authority for network security infrastructure, providing guidance on solution design, architecture reviews, and engineering best practices.
• Design and implement Infrastructure as Code (IaC) solutions using Terraform and related technologies to support scalable, repeatable deployments.
• Develop and maintain automation capabilities using Python, Ansible, and similar tools to improve operational efficiency and platform reliability.
• Integrate infrastructure automation and security controls into CI/CD pipelines to enable secure and reliable software and infrastructure delivery.
• Troubleshoot and resolve complex network and security infrastructure issues across development, test, and production environments.
• Drive continuous improvement initiatives focused on performance, resilience, security, and cost optimisation.
• Collaborate with Architecture, Cyber Security, and Cloud teams to define and evolve the organisation's network security strategy and standards.
• Produce and maintain high-quality technical documentation, operational procedures, and design artefacts.
• Support governance, compliance, risk management, and audit requirements, ensuring adherence to organisational and regulatory standards.
• Mentor and coach engineers, promoting knowledge sharing, technical excellence, and a culture of continuous improvement.
• Participate in major incident management and problem resolution activities, providing senior technical leadership when required.

Experience / Competences

Essential

• Minimum of 5 years’ experience working with Fortinet security products, certifications are desirable.
• Proven experience designing and operating AWS network security and connectivity services, including:
  • AWS Cloud WAN
  • AWS WAF
  • AWS Firewall Manager
  • AWS Transit Gateway
  • AWS Direct Connect
• Strong expertise in Terraform and Infrastructure as Code (IaC) methodologies.
• Experience with GitLab and modern source code management (SCM) practices.
• Advanced knowledge of enterprise-class firewall technologies across both on-premises and cloud environments, including Fortinet solutions.
• Strong understanding of AWS networking services and architectures, including VPNs, DNS, load balancing, routing, and security controls.
• Deep understanding of networking protocols and technologies, including TCP/IP, BGP, OSPF, routing, switching, and network segmentation.
• A deep and demonstrable understanding of digital certificates along with modern cryptography.
• Strong understanding of 802.1X technology and patterns.
• A working understanding of VPN and encapsulation technologies.
• A good understanding of identity based authentication and authorisation, including IAM security controls in cloud environments.
• Proven experience implementing network security controls, security best practices, and cloud-native security solutions.
• Experience developing infrastructure and security automation using Python, Ansible, or equivalent technologies.
• Exceptional troubleshooting and analytical skills, with the ability to diagnose and resolve complex technical issues under pressure.
• Strong communication and stakeholder management skills, with the ability to collaborate effectively across technical and business teams.
• Demonstrated ability to work independently while contributing successfully within a collaborative engineering environment.

Desired

• Degree in Computer Science, Information Technology, Cyber Security, Engineering, or a related discipline, or equivalent industry experience.
• AWS certifications, such as AWS Certified Advanced Networking – Specialty or AWS Certified Security – Specialty.
• Experience with network observability, monitoring, and telemetry platforms.
• Experience implementing DevOps practices and CI/CD pipelines within infrastructure environments.
• Knowledge of Site Reliability Engineering (SRE) principles and operational excellence frameworks.
• Working knowledge of information security frameworks and compliance standards, including ISO/IEC 27001 and SOC 2, with an understanding of their application within enterprise environments.
• Experience working within financial services or other highly regulated environments.
• Familiarity with Zero Trust networking concepts and modern cloud security architectures. 

Role Band & Level

• Manager / 6 

Not The Perfect Fit?

Concerned that you may not meet the criteria precisely? At TP ICAP, we wholeheartedly believe in fostering inclusivity and cultivating a work environment where everyone can flourish, regardless of your personal or professional background. If you are enthusiastic about this role but find that your experience doesn't align perfectly with every aspect of the job description, we strongly encourage you to apply. You may be the ideal candidate for this position or another opportunity within our organisation. Our dedicated Talent Acquisition team is here to assist you in recognising how your unique skills and abilities can be a valuable contribution. Don't hesitate to take the leap and explore the possibilities. Your potential is what truly matters to us.

Company Statement

We know that the best innovation happens when diverse people with different perspectives and skills work together in an inclusive atmosphere. That's why we're building a culture where everyone plays a part in making people feel welcome, ready and willing to contribute. TP ICAP Accord - our Employee Network - is a central to this. As well as representing specific groups, TP ICAP Accord helps increase awareness, collaboration, shares best practice, and holds our firm to account for driving continuous cultural improvement. 

Location