IAG Loyalty

About the Company

IAG Loyalty is part of International Airlines Group (IAG). We were founded as Airmiles in 1988 and became Avios in 2011, now we’re IAGL and we have over 30 years’ experience in loyalty.

We manage the British Airways Executive Club, Iberia Plus, Vueling Club, and the Aer Lingus AerClub, and we have an impressive range of retail, travel and financial services partners of the Avios currency.

We’re loyalty pioneers creating the world’s most rewarding experiences.

That’s our vision. We help people to enjoy incredible experiences by collecting and redeeming the iconic Avios currency. We design customer loyalty programmes, build loyalty management tools, provide loyalty tech solutions, and produce invaluable data and customer insights to turn customer loyalty into a powerful tool for maximising a brand power and scale.

We’re a vision and values led business. Our vision sets our ambition, and our values represent how we’re going to get there. Together, this perfect partnership unites our people into a club of colleagues that know why and how we do things here. Our values are owned by everyone in the club, and are uniquely ours:

• We bring passion to our work
• We have the courage to reimagine
• We focus on agility
• We excel in delivery
• We keep learning and stay curious
• We take belonging seriously

Our colleagues bring our vision and values to life every day in all they do. For our business, for our customers and for each other.

Listed Jobs

Company Name

IAG Loyalty

Job Title

Network Engineer (Cloud)

Job Description

**Job title** Network Engineer (Cloud) **Role Summary** Design, implement, and maintain secure cloud‑centric networking and CDN environments. Ensure architecture, firewalls, and policy enforcement support product, data, and AI teams while meeting audit and compliance standards. **Expectations** - Remain calm under tight deadlines and crisis situations. - Communicate effectively with stakeholders at all levels. - Own end‑to‑end tasks, from ideation to delivery and review. - Exhibit a collaborative, fast‑iteration mindset. - Perform occasional travel and hands‑on equipment support. **Key Responsibilities** - Architect and sustain AWS VPC, subnets, routing, NAT, peering, Security Groups, NACLs, IAM, WAF/Shield. - Deploy and optimize CDN solutions (Akamai, CloudFront, etc.). - Configure and manage IPSEC/VPN, DNS, and Palo Alto firewalls, NAT, LAN/WAN policies. - Deliver Infrastructure‑as‑Code using Terraform and monitor with industry tools. - Maintain TLS/PKI lifecycles, network monitoring, and incident response. - Develop and enforce security policy and procedure documents (ISO, SOC 2). - Lead technical reviews for IaC delivery across cloud and content platforms. - Process network operations tickets, ensuring timely resolution and documentation. **Required Skills** - AWS networking & security (VPC, subnets, routing, NAT, peering, SG, NACL, IAM, WAF/Shield). - CDN performance engineering (Akamai, CloudFront, etc.). - IPSEC, VPN, DNS, domain management. - Palo Alto Networks firewall administration. - IaC with Terraform and associated automation principles. - TLS/PKI lifecycle management and network monitoring/troubleshooting. - CI/CD tooling, SAML/IDP integration, Microsoft Entra. - ITIL knowledge and strong stakeholder communication. **Required Education & Certifications** - Bachelor’s degree in Computer Science, Information Technology, or related field. - Relevant certifications: AWS Certified Solutions Architect (Associate/Professional), AWS Certified Advanced Networking – Specialty, Palo Alto Networks Certified Network Security Engineer (PCNSE), and analogous CDN or cloud networking credentials.

London, United kingdom

Hybrid

28-02-2026

Company Name

IAG Loyalty

Job Title

Senior Application Security Engineer

Job Description

**Job title:** Senior Application Security Engineer **Role Summary** Lead the application security practice in a cloud‑native platform, driving secure software development across the entire lifecycle. Integrate automated security tooling, conduct threat modelling, and mentor engineering teams to embed a secure‑by‑default culture. **Expectations** - Own key security KPIs for application security. - Deliver measurable improvements in code quality, vulnerability remediation, and security awareness. - Act as an in‑house AppSec advocate, influencing design, architecture, and delivery processes. **Key Responsibilities** - Champion secure development practices with product and engineering teams. - Design, implement, and maintain SAST, DAST, SCA, and other security tools in CI/CD pipelines. - Perform threat modelling and review authentication, cryptography, and logging decisions. - Triaging vulnerabilities, providing actionable mitigation guidance, and tracking resolution. - Oversee and contribute to penetration testing, vulnerability scanning, and bug‑bounty programmes. - Produce and refine internal security documentation, standards, and audit support. - Facilitate training and knowledge sharing to strengthen the security culture. **Required Skills** - Professional software engineering experience with strong security focus. - Deep knowledge of web & API vulnerabilities (e.g., OWASP Top 10). - Proficient in coding/scripting (Python, Bash) and security automation. - Hands‑on with SAST/DAST/SCA tools and CI/CD security integration. - Experience in AWS, containers, and microservices architectures. - Ability to conduct threat modelling, technical design review, and secure architecture advisory. - Excellent communication, collaboration, and mentorship abilities. **Required Education & Certifications** - Bachelor’s degree in Computer Science, Information Technology, or related field. - Relevant security certifications preferred (e.g., CISSP, CEH, GCIA, or equivalent).

London, United kingdom

Hybrid

Senior

28-02-2026

Company Name

IAG Loyalty

Job Title

Senior Security Engineer (AWS)

Job Description

**Job Title:** Senior Security Engineer (AWS) **Role Summary:** Lead the platform security practice for a cloud‑native PaaS environment, focusing on secure by default engineering, continuous security improvement, and operation of critical security tools (CSPM/CNAPP). Own automation, incident response participation, and cross‑functional guidance to embed security into the SDLC. **Expactations:** Deliver measurable security improvements within 90 days, supervise a small team, maintain continuous availability of security tooling, and act as a trusted advisor to product and DevOps leaders. **Key Responsibilities:** - Design, implement, and maintain secure-by‑default patterns for AWS workloads using IaC (Terraform). - Operate and optimise CSPM, CNAPP, SIEM, and incident‑response tools. - Automate security tasks with Python/Bash scripts and integrate into CI/CD pipelines. - Conduct security reviews, penetration‑test coordination, and vulnerability remediation. - Lead on‑call rotation for incident detection, escalation, and post‑mortem. - Evaluate and recommend new security technologies and processes. - Mentor junior engineers and promote security best practices across teams. **Required Skills:** - Cloud engineering with hands‑on experience in AWS, Terraform, and IaC. - Proficiency in DevOps, scripting (Python, Bash), and CI/CD automation. - Deep knowledge of security standards (OWASP, CIS, NIST) and Agile/DevOps principles. - Experience with CSPM, CNAPP, SIEM, and security incident response. - Strong communication, decision‑making under pressure, and entrepreneurial mindset. **Required Education & Certifications:** - Bachelor’s degree in Computer Science, Cybersecurity, or related field. - Relevant certifications preferred: AWS Certified Security – Specialty, CISSP, or equivalent.

London, United kingdom

Hybrid

Senior

28-02-2026