Identity & Access Management Lead - Security Engineering
Job Description
[Up to c. $275k Base Salary + Discretionary Bonus (or equivalent) | Hybrid Working]
Role Overview
We’re representing a prominent global investment management firm seeking a technically accomplished Identity & Access Management Lead to strengthen its security engineering capability and take ownership of identity architecture across a complex technology environment. Reporting directly to the CISO, this position centres on solving sophisticated identity challenges across proprietary applications, enterprise platforms and interconnected services. Particular emphasis is placed on application authorisation, access entitlements, privileged credentials and the growing security requirements surrounding machine identities and AI-driven systems.
This is an engineering-led leadership appointment rather than a primarily governance-focused position. The successful individual will influence longer-term identity strategy while remaining closely involved in architecture, development and implementation. An exceptional senior engineer or architect ready to assume broader technical ownership would be strongly considered...
Role Snapshot
- Bring 7+ years of substantial IAM or identity security engineering experience, with evidence of designing and implementing technically complex solutions
- Own identity architecture and engineering across internally developed applications, with particular depth in authentication, authorisation and granular entitlement models
- Demonstrate hands-on expertise with SailPoint IIQ and CyberArk, including engineering, customisation, integration and the management of identity and privileged access
- Apply strong Python programming skills to develop identity integrations, automate security controls and address challenges that extend beyond standard vendor functionality
- Engineer secure approaches to service accounts, workload identities, authentication tokens, API credentials, certificates and secrets across interconnected systems
- Help establish identity security controls for emerging AI agents, LLM-enabled applications and machine-to-machine integrations, including lifecycle governance and least-privilege access
- Strengthen enterprise identity governance through Active Directory integration, access provisioning, joiner/mover/leaver processes, policy enforcement and auditability
- Work directly with software developers, infrastructure and DevOps engineers to resolve complex identity problems and embed effective controls into application architectures
- Provide technical direction to IAM initiatives, influence engineering standards and communicate architectural decisions effectively with senior security and technology stakeholders
- (Preferred) Experience within financial services or similarly demanding technology environments, alongside familiarity with OAuth 2.0, OIDC, SAML, SQL and modern cloud identity architectures
...
Apply for this role
All fields marked with * are required.