Hands-on security architect to own customer identity on Auth0, the Akamai edge and PCI DSS segmentation at a PE-backed B2B platform used in more than 160 countries. Senior Director level, individual contributor and number 2 to the CISO, technically leading, remote first.
About the business
A business-to-business technology platform with revenue above $1bn, hundreds of thousands of business users and hundreds of supplier integrations, rebuilt on a cloud-native stack over the last three years and now opening its API to software companies and AI agents while everyone already on it keeps working. It holds card data for the businesses on the platform, so PCI DSS is part of the product.
The role
A backfill for a long-tenured engineer, and the most senior technical seat in a security organisation of about 35, reporting to the CISO. No line management. You set what security requires of the application security, operations, architecture and DevOps teams, and carry it through.
Four things sit with you directly:
- Customer identity on Auth0: the custom code, the partner integrations, OAuth 2.0, OIDC and SAML.
- The edge on Akamai: WAF policy, bot and DDoS protection in front of live API traffic from thousands of businesses.
- PCI DSS v4.0.1: segmentation and scope reduction, the assessment, and the compensating controls where the standard pattern would break a customer's workflow.
- AWS underneath it all: you set the security requirements and review what the cloud team builds, without having to be the one at the console.
About you
Nobody has all of this at equal depth and the client knows it. You will recognise yourself in at least two of these:
- You have owned a customer identity platform for external customers or partners, ideally Auth0.
- You have tuned a WAF, bot or DDoS platform in front of real customer traffic, ideally Akamai.
- You have designed segmentation or scope reduction for a cardholder data environment and sat opposite the assessor.
- You came up through hands-on engineering, still build, and engineers take your word because of it.
- Ten years or more, and you have changed a live platform that thousands of businesses depend on without breaking it.
Practicalities
Remote first from the UK or the US, with time at the client's Thames Valley head office when it matters. Package set at Senior Director level for the person rather than to a band; we talk about it on the first call, not the last. Deltahumans is working this appointment exclusively. The client is not named here because the role sits in a live team; it is named at the first conversation, and nothing goes to them without your agreement.
#J-18808-Ljbffr
Senior Principal Security Engineer employer: Delta Humans
Join a multi-award-winning AI innovator in London, where you'll work on high-impact projects that transform how global enterprises engage with their customers. With a hybrid working model, an inclusive culture, and ample opportunities for professional growth, this company offers a rewarding environment for Data Science Consultants looking to make a tangible impact. Enjoy generous benefits including 26+ days of holiday and wellbeing support, all while collaborating with leading clients in a stunning office setting.
