Identity and Access Management Engineer


London
Permanent
Negotiable
Financial Technology
PR/582576_1773410834
Identity and Access Management Engineer

A leading global hedge fund is seeking an experienced Identity and Access Management Engineer with extensive hands‑on experience designing and implementing modern identity solutions. This role focuses on advancing the firm's IAM capabilities to support innovation, agility, and strong security foundations across a complex technical environment.

Working with a diverse set of stakeholders - including developers, researchers, and infrastructure teams - the successful candidate will operate as a bridge between security and engineering, turning strategic security objectives into scalable, practical solutions. This is a deeply technical, engineering‑driven role, requiring strong low‑level IAM expertise and the ability to design and build identity platforms rather than solely define governance or policy.
Key Responsibilities:
  • Design and implement modern IAM platforms, ensuring scalability, resilience, and security from the ground up.
  • Secrets management solutions for applications, services, and infrastructure-covering secure storage, rotation, access control, and auditing.
  • User‑to‑service and service‑to‑service authentication systems, built on modern, standards‑based methods.
  • Standards‑compliant identity providers and federated identity services (e.g., OAuth 2.0, OpenID Connect, SAML) to support consistent, secure authentication across the organisation.
  • Authorisation frameworks including fine‑grained and policy‑driven access models aligned with least‑privilege and zero‑trust principles.
  • Promoting IAM standards, reusable patterns, and reference architectures to streamline secure adoption across engineering and infrastructure teams.
  • Translating complex identity and security risks into actionable guidance for technical stakeholders.
  • Continuously maturing IAM capabilities, identifying gaps, and driving ongoing improvements aligned with evolving technology needs.
  • Contributing to broader security domains-such as cloud security, application security, and platform security-where identity acts as a core control.
Required Qualifications:
  • 5+ years of hands‑on experience in IAM engineering or security engineering, with a focus on building and operating identity platforms in production settings.
  • Recent experience implementing secrets management, authentication systems, and authorisation solutions using modern, standards‑based approaches.
  • Strong understanding of IAM architecture, identity protocols, and foundational security design principles.
  • Ability to troubleshoot complex identity flows and deep understanding of modern IAM technologies and low‑level mechanics.
  • Strong grasp of security best practices, attack patterns, and identity‑related threats across applications, platforms, and cloud environments.
  • Broader systems knowledge-including Linux/Unix, networking fundamentals, containerisation/Kubernetes, and cloud security concepts.
  • Ability to translate complex risks into clear, actionable guidance for varied stakeholders.
  • Ability to read and write Python.
  • Degree in Engineering, Computer Science, or another STEM field.
Nice to Have:
  • Experience using infrastructure‑as‑code or security‑as‑code tooling (e.g., Terraform, Ansible), particularly for IAM, secrets management, or policy automation.
  • Advanced coding ability across multiple programming languages.
  • Background in high‑performance engineering environments, research‑driven teams, or settings requiring careful security trade‑offs

FAQs

Congratulations, we understand that taking the time to apply is a big step. When you apply, your details go directly to the consultant who is sourcing talent. Due to demand, we may not get back to all applicants that have applied. However, we always keep your CV and details on file so when we see similar roles or see skillsets that drive growth in organisations, we will always reach out to discuss opportunities.

Yes. Even if this role isn’t a perfect match, applying allows us to understand your expertise and ambitions, ensuring you're on our radar for the right opportunity when it arises.

We also work in several ways, firstly we advertise our roles available on our site, however, often due to confidentiality we may not post all. We also work with clients who are more focused on skills and understanding what is required to future-proof their business. 

That's why we recommend registering your CV so you can be considered for roles that have yet to be created. 

Yes, we help with CV and interview preparation. From customised support on how to optimise your CV to interview preparation and compensation negotiations, we advocate for you throughout your next career move.

Handpicked roles for you