Senior Security Architect

We are partnering with a leading quantitative trading and technology-driven financial firm looking for a Senior Security Architect to join its Information Security team. This is a strategic, hands-on architecture role focused on shaping the future of identity and access management across a highly complex technology landscape spanning cloud, on-premises infrastructure, distributed systems, and mission-critical trading environments.

You'll work alongside world-class engineers, infrastructure teams, and security specialists to design scalable, secure solutions that protect the firm's global operations while enabling innovation and growth across an enterprise-wide security environment.

Responsibilities:

• Define and drive the long-term security architecture strategy for IAM across workforce, customer, and machine identities.
• Design and implement enterprise IAM solutions including:
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• Privileged Access Management (PAM)
• Identity Governance & Administration (IGA)
• Identity Provider (IdP) platforms
• Architect security controls across AWS, Azure, GCP, and on-premises infrastructure.
• Partner with engineering teams to embed secure-by-design principles into application development, infrastructure automation, and CI/CD pipelines.
• Lead threat modelling exercises, architecture reviews, and security risk assessments.
• Develop security standards, reference architectures, and technical design patterns used across the organization.
• Collaborate closely with Security Operations, Infrastructure, Engineering, and Governance teams to ensure alignment with regulatory and security requirements.
• Evaluate emerging technologies and provide strategic recommendations to senior leadership.
• Mentor and guide other security professionals while acting as a senior technical authority within the organisation.

Required Experience:

• 8+ years of experience within Information Security.
• Proven experience operating in a Security Architecture capacity.
• Strong expertise across identity and access management technologies such as:
• Okta
• Entra ID / Azure AD
• Ping Identity
• CyberArk
• SailPoint
• BeyondTrust
• Deep understanding of authentication and authorization protocols including OAuth2, OpenID Connect (OIDC), SAML, SCIM, Kerberos, and LDAP.
• Experience architecting security solutions across public cloud environments (AWS, Azure and/or GCP) as well as traditional on-prem infrastructure.
• Financial services experience with knowledge of the associated threat, risk, and regulatory landscape.
• Strong understanding of:
• Zero Trust Architecture
• Network Security
• Endpoint Security
• Cryptography
• Secrets Management
• Experience with Infrastructure-as-Code tools such as Terraform or CloudFormation.
• Scripting and automation capability using Python, PowerShell, or Bash.

Preferred Experience:

• Industry certifications such as CISSP, ISSAP, SABSA, CCSP, AWS Security Specialty, or Azure Security certifications.
• Experience securing Kubernetes and containerized environments.
• Knowledge of workload identity and service mesh security.
• Exposure to quantitative trading, high-performance computing, or low-latency infrastructure environments.
• Contributions to security research initiatives, open-source projects, or security communities.