I’m working with a high-growth financial technology firm specialising institutional finance, algorithmic trading and digital assets. The company provides trading technology and liquidity solutions to institutions, exchanges and digital asset businesses worldwide.
As its infrastructure and operations continue to develop, identity and data protection are central to maintaining secure access, protecting sensitive information and meeting the control standards expected in a regulated financial environment.
Responsibilities
- Own and develop the identity provider and SSO estate, including application integrations, MFA and SAML, OIDC and SCIM.
- Deliver identity projects across IGA, passwordless authentication, conditional access and automated joiner, mover and leaver processes.
- Design authentication and access controls for internal systems and customer-facing products, including OAuth 2.0 flows, token handling and session policies.
- Develop data protection capabilities across data classification, DSPM, DLP, encryption, PKI, key management and secrets management.
- Implement privileged access management and just-in-time access controls, ensuring elevated access is approved, time-bound, logged and automatically removed.
- Work with engineering, IT, HR and application owners to improve access governance and review application and API authentication designs.
- Produce audit evidence, monitor identity activity and support investigations into account compromise.
- Use Terraform, infrastructure as code and scripting to automate security controls and reduce manual processes.
What they’re looking for
- Hands-on experience delivering and operating enterprise identity and SSO solutions.
- Strong knowledge of SAML, OIDC, OAuth 2.0, SCIM and JWT, including common implementation risks.
- Experience with PAM, JIT access, identity lifecycle management and enterprise identity providers.
- Working knowledge of Terraform, infrastructure as code and scripting.
- Experience with data protection technologies, including encryption, key management, PKI or DLP.
- A methodical approach to documentation, change control and audit evidence.
- Someone comfortable working across the wider security function, including application security, incident response and cloud security.
- Experience in regulated financial services or crypto is highly desirable. Customer identity, machine identity, cloud secrets management and agentic AI access management are also highly desired areas of experience.
- Work on critical financial infrastructure: Help secure the identity and data controls behind an always-on trading environment.
- Broad technical ownership: Work across IAM, application authentication, privileged access and data protection.
- Build and automate: Shape security capabilities with an emphasis on infrastructure as code, scripting and reducing manual processes.
- Work closely with engineering: Influence how authentication and access controls are designed and implemented across products and internal systems.
- International environment: Join a global team spanning finance, technology and digital assets, with health coverage, pension and a learning and development budget.
#J-18808-Ljbffr
IAM and Data Protection Specialist employer: Iceberg
Iceberg is an excellent employer, offering a collaborative work culture that values employee engagement and development. With a focus on driving positive employee experiences and supporting career growth, this respected global advisory firm provides unique opportunities for HR professionals to thrive in a dynamic environment in London. Employees benefit from a strong emphasis on work-life balance and the chance to make a meaningful impact across the EMEA region.
