IAM Security Engineer

The client is undergoing a transformation of its Identity and Access Management practices including the delivery of a set of net new tools to overhaul how IAM is carried out in the industry.  We are seeking experienced and dynamic Security Engineer who have an excellent understanding of Identity Management, with a successful track record of working in complex global organisations at fast pace. 

In this role, you will:

• Design and implement security controls across the IDAM 2.0 platform.
• Embed Secure by Design principles throughout solution delivery.
• Implement and maintain Zero Trust security controls.
• Configure and maintain authentication and authorisation security mechanisms.
• Implement secure service-to-service communication using mutual TLS (mTLS).
• Implement and maintain Policy-as-Code solutions using OPA and related technologies.
• Integrate secrets management, PKI and certificate lifecycle services.
• Support cryptographic key management and certificate rotation processes.
• Perform security reviews of solution designs, infrastructure and application code.
• Conduct threat modelling and security risk assessments.
• Develop and maintain security baselines, standards and hardening guides.
• Implement cloud security controls for GCP resources and Kubernetes platforms.
• Support identity governance, privileged access and least privilege implementation.
• Collaborate with Security Operations and Incident Response teams during security events.
• Support security assurance for third-party integrations and supplier solutions.

Essential Skills:

• Information Security Engineering
• Identity and Access Management (IAM)
• Zero Trust Architecture
• Authentication and Authorisation
• Workload Identity
• Agent Identity
• PKI and Certificate Management
• Cryptography
• Cloud Security (GCP)
• Kubernetes Security
• API Security
• Policy-as-Code (OPA)
• DevSecOps