# Network & Cloud Infrastructure Security Engineer

[Flowdesk](https://gurify.com/jobs?q=Flowdesk) · London · Posted 3 days ago

[Security](https://gurify.com/jobs/security)

[Apply on the original posting → (opens in a new tab)](https://job-boards.eu.greenhouse.io/flowdesk/jobs/5008406101)

## Job description

### About Flowdesk

At Flowdesk, we are building the infrastructure powering the next era of global finance. As a full-service digital asset trading and technology firm, we provide liquidity solutions, OTC trading, and market infrastructure that connect digital assets to global markets with institutional-grade precision, transparency, and scale. Flowdesk combines expertise from traditional finance, algorithmic trading, and blockchain technology to deliver always-on trading capabilities across the digital asset ecosystem.

Founded in 2020, we have grown into a global team supporting institutions, exchanges, and token issuers worldwide as the financial system evolves toward tokenized markets.

Why join Flowdesk? You’ll be joining a company operating at the intersection of finance, technology, and crypto – solving complex market problems, building critical infrastructure, and helping shape how digital assets move globally. We move fast, think long term, and work with a strong ownership mindset across engineering, trading, product, operations, and business teams.

### Role Description

Flowdesk runs regulated crypto trading and custody on cloud infrastructure across several jurisdictions. The Security team keeps that infrastructure and the networks around it tightly controlled, segmented and provable to auditors and regulators.

In this role you will own cloud and network security design and the day-to-day operation of our infrastructure controls. You will also review architecture for new systems before they go live.

You will work as part of the wider security team, alongside engineering teams and SecOps, so that security is part of the design from the start.

### Key Responsibilities

- Design, run and tune cloud-native, virtual and on-premises firewalls, including rule hygiene and change review

- Run security architecture reviews for new services, integrations and offices, and write up findings with clear, prioritised fixes

- Plan network segmentation across cloud and office environments, so sensitive systems are isolated from everything else

- Review cloud infrastructure architecture and help design and support a best practice secure cloud infrastructure

- Own our SASE and zero-trust access approach

- Manage the security of network devices, including configuration baselines, patching, access, lifecycle and routing protocols

- Build and change network security controls through Terraform and infrastructure as code, using the same review and approval process as our engineering teams

- Work across security and engineering teams on network changes, so security is part of the design and not added afterwards

- Monitor network telemetry with SecOps, and help investigate and contain incidents

- Produce evidence for audits and regulators, and help close findings from pentests and cloud posture management reviews

- Set standards and reference architectures for network controls, and keep them current

- Work as part of the wider security team, and cover gaps in other areas when they arise, such as during absences, incidents or peaks in workload

### Requirements

### Must Have

- Several years in network or cloud security engineering, with hands-on production experience

- Working knowledge of both cloud and on-premises networks: private networks, routing, peering, private connectivity, DNS, low latency networks, load balancing, egress control, switching and wireless

- Experience managing network devices securely

- Hands-on experience with cloud and next-generation firewalls, and with SASE or ZTNA platforms

- Solid understanding of Terraform and infrastructure as code, and the ability to work day to day in an environment where infrastructure is managed that way

- Scripting skills (required for the role)

- General security knowledge across the main domains, including mTLS, IPsec, WireGuard, SSL inspection, IDPS, and network monitoring and detection

- A process-oriented approach: you document what you do, follow change control, and leave an audit trail

- Experience reviewing architectures and explaining risk to engineers and non-technical stakeholders

- Willingness to work across the security team and learn adjacent areas, such as incident response, GRC evidence or cloud security, as needed

### Preferred

### Highly desired

- Experience working in a regulated, controlled environment, such as financial services or crypto

### Helpful

- Container and Kubernetes network policy and service mesh experience

- Relevant security or cloud networking certifications

### Person Profile

- Security-by-design mindset: engages early in network and architecture changes rather than reviewing at the end

- Clear communicator, able to explain risk to engineers and non-technical stakeholders

- Process-oriented: documents decisions, follows change control and leaves a clear audit trail

- Automation-minded: prefers infrastructure as code and scripting over manual change

- Comfortable working across the security team and stepping in on adjacent areas when needed

### Company Culture & Values

- Take Action & Own the Mission

- Be of Service & Contribute

- Innovate, Create Value, & Be Courageous

- Act with Integrity & Respect

### Benefits

- International environment (English is the main language)

- 100% health coverage

- Team events and offsites

- Company Pension scheme

- Learning and Development budget

**Live in Flowdesk’s hiring system.** Read from the company's own applicant tracking system, not reposted from a job board — so it's a real, open requisition rather than an ad that outlived the role.

We remove it as soon as it disappears at source.

## More jobs like this

- BJ [Cloud Infrastructure Security Engineer](https://gurify.com/job/cloud-infrastructure-security-engineer-at-bjak-d5f359aa2e3a) Bjak · United Kingdom · last week
- IN [Senior Infrastructure and Cloud Security Engineer (m/f/d)](https://gurify.com/job/senior-infrastructure-and-cloud-security-engineer-m-f-d-at-a564d8d2798e) Internationalcopyrightenterpriseservices · London · 4 weeks ago
- IN [Senior Infrastructure and Cloud Security Engineer (m/f/d)](https://gurify.com/job/senior-infrastructure-and-cloud-security-engineer-m-f-d-at-3f7722b49cef) Internationalcopyrightenterpriseservices · London · 4 weeks ago
- IN [Senior Infrastructure and Cloud Security Engineer (m/f/d)](https://gurify.com/job/senior-infrastructure-and-cloud-security-engineer-m-f-d-at-f7eb0c3edc01) Internationalcopyrightenterpriseservices · London · 4 weeks ago
- XA [Infrastructure Security Engineer](https://gurify.com/job/infrastructure-security-engineer-at-xai-5df6888fa213) Xai · Dublin, United Kingdom · 3 weeks ago
- OM [Platform Security Engineer](https://gurify.com/job/platform-security-engineer-at-omnea-79e993c63a72) Omnea · London · last week

```json
{"@context":"https://schema.org/","@type":"JobPosting","title":"Network \u0026 Cloud Infrastructure Security Engineer","description":"\u003Ch3\u003EAbout Flowdesk\u003C/h3\u003E\u003Cp\u003EAt Flowdesk, we are building the infrastructure powering the next era of global finance. As a full-service digital asset trading and technology firm, we provide liquidity solutions, OTC trading, and market infrastructure that connect digital assets to global markets with institutional-grade precision, transparency, and scale. Flowdesk combines expertise from traditional finance, algorithmic trading, and blockchain technology to deliver always-on trading capabilities across the digital asset ecosystem.\u003C/p\u003E\u003Cp\u003EFounded in 2020, we have grown into a global team supporting institutions, exchanges, and token issuers worldwide as the financial system evolves toward tokenized markets.\u003C/p\u003E\u003Cp\u003EWhy join Flowdesk? You\u2019ll be joining a company operating at the intersection of finance, technology, and crypto \u2013 solving complex market problems, building critical infrastructure, and helping shape how digital assets move globally. We move fast, think long term, and work with a strong ownership mindset across engineering, trading, product, operations, and business teams.\u003C/p\u003E\u003Ch3\u003ERole Description\u003C/h3\u003E\u003Cp\u003EFlowdesk runs regulated crypto trading and custody on cloud infrastructure across several jurisdictions. The Security team keeps that infrastructure and the networks around it tightly controlled, segmented and provable to auditors and regulators.\u003C/p\u003E\u003Cp\u003EIn this role you will own cloud and network security design and the day-to-day operation of our infrastructure controls. You will also review architecture for new systems before they go live.\u003C/p\u003E\u003Cp\u003EYou will work as part of the wider security team, alongside engineering teams and SecOps, so that security is part of the design from the start.\u003C/p\u003E\u003Ch3\u003EKey Responsibilities\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EDesign, run and tune cloud-native, virtual and on-premises firewalls, including rule hygiene and change review\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ERun security architecture reviews for new services, integrations and offices, and write up findings with clear, prioritised fixes\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EPlan network segmentation across cloud and office environments, so sensitive systems are isolated from everything else\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EReview cloud infrastructure architecture and help design and support a best practice secure cloud infrastructure\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EOwn our SASE and zero-trust access approach\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EManage the security of network devices, including configuration baselines, patching, access, lifecycle and routing protocols\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EBuild and change network security controls through Terraform and infrastructure as code, using the same review and approval process as our engineering teams\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWork across security and engineering teams on network changes, so security is part of the design and not added afterwards\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EMonitor network telemetry with SecOps, and help investigate and contain incidents\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EProduce evidence for audits and regulators, and help close findings from pentests and cloud posture management reviews\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ESet standards and reference architectures for network controls, and keep them current\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWork as part of the wider security team, and cover gaps in other areas when they arise, such as during absences, incidents or peaks in workload\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003ERequirements\u003C/h3\u003E\u003Ch3\u003EMust Have\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003ESeveral years in network or cloud security engineering, with hands-on production experience\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWorking knowledge of both cloud and on-premises networks: private networks, routing, peering, private connectivity, DNS, low latency networks, load balancing, egress control, switching and wireless\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience managing network devices securely\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EHands-on experience with cloud and next-generation firewalls, and with SASE or ZTNA platforms\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ESolid understanding of Terraform and infrastructure as code, and the ability to work day to day in an environment where infrastructure is managed that way\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EScripting skills (required for the role)\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EGeneral security knowledge across the main domains, including mTLS, IPsec, WireGuard, SSL inspection, IDPS, and network monitoring and detection\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EA process-oriented approach: you document what you do, follow change control, and leave an audit trail\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience reviewing architectures and explaining risk to engineers and non-technical stakeholders\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EWillingness to work across the security team and learn adjacent areas, such as incident response, GRC evidence or cloud security, as needed\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EPreferred\u003C/h3\u003E\u003Ch3\u003EHighly desired\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EExperience working in a regulated, controlled environment, such as financial services or crypto\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EHelpful\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EContainer and Kubernetes network policy and service mesh experience\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ERelevant security or cloud networking certifications\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EPerson Profile\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003ESecurity-by-design mindset: engages early in network and architecture changes rather than reviewing at the end\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EClear communicator, able to explain risk to engineers and non-technical stakeholders\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EProcess-oriented: documents decisions, follows change control and leaves a clear audit trail\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAutomation-minded: prefers infrastructure as code and scripting over manual change\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EComfortable working across the security team and stepping in on adjacent areas when needed\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003ECompany Culture \u0026amp; Values\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003ETake Action \u0026amp; Own the Mission\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EBe of Service \u0026amp; Contribute\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EInnovate, Create Value, \u0026amp; Be Courageous\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAct with Integrity \u0026amp; Respect\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EBenefits\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EInternational environment (English is the main language)\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003E100% health coverage\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ETeam events and offsites\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECompany Pension scheme\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ELearning and Development budget\u003C/li\u003E\u003C/ul\u003E","identifier":{"@type":"PropertyValue","name":"Gurify","value":"network-cloud-infrastructure-security-engineer-at-flowdesk-1077cf242d00"},"url":"https://gurify.com/job/network-cloud-infrastructure-security-engineer-at-flowdesk-1077cf242d00","datePosted":"2026-10-16","validThrough":"2026-12-03T23:59:59Z","hiringOrganization":{"@type":"Organization","name":"Flowdesk","sameAs":"https://job-boards.eu.greenhouse.io/flowdesk"},"directApply":false,"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressCountry":"GB","addressLocality":"London"}}}
```

```json
{"@context":"https://schema.org/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Jobs","item":"https://gurify.com/jobs"},{"@type":"ListItem","position":2,"name":"United Kingdom","item":"https://gurify.com/jobs/united-kingdom"},{"@type":"ListItem","position":3,"name":"Network \u0026 Cloud Infrastructure Security Engineer","item":"https://gurify.com/job/network-cloud-infrastructure-security-engineer-at-flowdesk-1077cf242d00"}]}
```