Senior Identity & Data Protection Security Engineer
Job Description
[Up to c. £150k Comp Package | Hybrid Working]
Role Overview
We're representing an established digital asset trading and financial technology firm, operating sophisticated trading infrastructure and institutional financial services across international markets. The organisation is investing in its security engineering capabilities to strengthen identity controls, protect sensitive information and support an increasingly complex technology environment.
Working within the wider Security team, this position combines enterprise identity engineering, application authentication and data protection. You'll take ownership of critical security capabilities spanning cloud infrastructure, internal applications and production systems, ensuring that access is securely managed, automated and independently verifiable. The role offers substantial technical ownership, from improving identity architecture and privileged access controls to developing encryption, key management and data security capabilities. It will suit an experienced engineer who enjoys building and operating security platforms rather than focusing exclusively on policy or oversight...
Role Snapshot
- Bring approximately 4+ years of relevant security engineering experience, including practical ownership of identity infrastructure, authentication services and data protection technologies
- Engineer and maintain enterprise identity platforms, SSO integrations and application authentication, with strong knowledge of SAML, OIDC, OAuth 2.0, SCIM and JWT
- Deliver identity governance capabilities covering automated provisioning, identity lifecycle management, access certification and role-based permissions across cloud and SaaS environments
- Develop secure authentication architectures for internal and customer-facing applications, including token management, session security, MFA and conditional access
- Build and maintain privileged access controls, including PAM, just-in-time elevation, emergency access procedures and service account governance
- Design and operate data security technologies spanning encryption, PKI, hardware security modules, cryptographic key management, secrets management and password protection
- Implement information classification, Data Security Posture Management (DSPM) and Data Loss Prevention (DLP) controls to identify and safeguard sensitive information
- Apply Terraform, infrastructure as code and scripting to automate security configuration, access workflows and operational processes, maintaining reliable change records
- Partner with security engineers, infrastructure teams and business stakeholders to review authentication designs, investigate identity threats and produce defensible regulatory audit evidence
- (Preferred) Experience in regulated financial services or digital assets, with additional exposure to CIAM, Kubernetes-based secrets management or machine identity security particularly valuable
...
Apply for this role
All fields marked with * are required.