Network & Cloud Infrastructure Security Engineer

At Flowdesk, we are building the infrastructure powering the next era of global finance. As a full-service digital asset trading and technology firm, we provide liquidity solutions, OTC trading, and market infrastructure that connect digital assets to global markets with institutional-grade precision, transparency, and scale. Flowdesk combines expertise from traditional finance, algorithmic trading, and blockchain technology to deliver always-on trading capabilities across the digital asset ecosystem.

Flowdesk runs regulated crypto trading and custody on cloud infrastructure across several jurisdictions. The Security team keeps that infrastructure and the networks around it tightly controlled, segmented and provable to auditors and regulators.

In this role you will own cloud and network security design and the day-to-day operation of our infrastructure controls. You will also review architecture for new systems before they go live. You will work as part of the wider security team, alongside engineering teams and SecOps, so that security is part of the design from the start.

Responsibilities

• Design, run and tune cloud-native, virtual and on-premises firewalls, including rule hygiene and change review
• Run security architecture reviews for new services, integrations and offices, and write up findings with clear, prioritised fixes
• Plan network segmentation across cloud and office environments, so sensitive systems are isolated from everything else
• Review cloud infrastructure architecture and help design and support a best practice secure cloud infrastructure
• Own our SASE and zero-trust access approach
• Manage the security of network devices, including configuration baselines, patching, access, lifecycle and routing protocols
• Build and change network security controls through Terraform and infrastructure as code, using the same review and approval process as our engineering teams
• Work across security and engineering teams on network changes, so security is part of the design and not added afterwards
• Monitor network telemetry with SecOps, and help investigate and contain incidents
• Produce evidence for audits and regulators, and help close findings from pentests and cloud posture management reviews
• Set standards and reference architectures for network controls, and keep them current
• Work as part of the wider security team, and cover gaps in other areas when they arise, such as during absences, incidents or peaks in workload

Requirements

• Several years in network or cloud security engineering, with hands-on production experience
• Working knowledge of both cloud and on-premises networks: private networks, routing, peering, private connectivity, DNS, low latency networks, load balancing, egress control, switching and wireless
• Experience managing network devices securely
• Hands-on experience with cloud and next-generation firewalls, and with SASE or ZTNA platforms
• Solid understanding of Terraform and infrastructure as code, and the ability to work day to day in an environment where infrastructure is managed that way
• Scripting skills (required for the role)
• General security knowledge across the main domains, including mTLS, IPsec, WireGuard, SSL inspection, IDPS, and network monitoring and detection
• A process-oriented approach: you document what you do, follow change control, and leave an audit trail
• Experience reviewing architectures and explaining risk to engineers and non-technical stakeholders
• Willingness to work across the security team and learn adjacent areas, such as incident response, GRC evidence or cloud security, as needed
• Security-by-design mindset: engages early in network and architecture changes rather than reviewing at the end
• Automation-minded: prefers infrastructure as code and scripting over manual change
• Nice to have: Experience working in a regulated, controlled environment, such as financial services or crypto
• Nice to have: Container and Kubernetes network policy and service mesh experience
• Nice to have: Relevant security or cloud networking certifications

Benefits

• International environment (English is the main language)
• 100% health coverage
• Team events and offsites
• Company Pension scheme
• Learning and Development budget

We analyzed this company's recent hires, and it passed our analysis. DYOR.