At a Glance
- Tasks: Design and implement secure identity and access controls across major platforms.
- Company: Join a leading tech firm focused on cloud security and innovation.
- Benefits: Enjoy competitive medical insurance, retirement plans, and generous paid time off.
- Other info: Dynamic role with opportunities for professional growth and development.
- Why this job: Make a real impact on security while collaborating with diverse teams.
- Qualifications: Expertise in identity/access security and hands-on experience with key platforms.
The predicted salary is between 60000 - 80000 £ per year.
Role Overview
We are hiring a Senior Security Engineer to join our Cloud Architecture team, focused on security configuration and identity security across client and internal platforms.
The role leads the design and implementation of secure‑by‑default patterns for identity, access, and configuration in Microsoft Entra ID (Azure AD), Okta, Microsoft 365, Google Workspace, and AWS IAM Identity Center.
What You Will Do
Design and implement identity and access controls across Entra ID, Okta, M365, Google Workspace, and AWS IAM Identity Center to raise control coverage and reduce account compromise risk.
Define and enforce conditional access, MFA, and passwordless strategies to achieve target adoption rates.
Why It Might Be a Fit
You will work closely with Platform Engineering, EUC/Workplace, Security Operations, Data Engineering, and Client Delivery teams to improve control coverage, reduce risk and enable frictionless, compliant access for users, applications, and services.
Requirements
- Well versed in identity/access security engineering or architecture within enterprise environments.
- Hands‑on expertise hardening Microsoft Entra ID (Azure AD), Google Workspace Admin, and AWS IAM Identity Center configurations, plus Okta, Microsoft 365, and Active Directory/Entra Connect.
- Proven delivery of SSO/MFA/conditional access programs; experience with passwordless and strong authentication methods.
- Strong experience with SCIM and API‑based integrations for JML automation; Service Now access workflows, approvals, and attestation.
- Privileged access management (Entra PIM/Okta) and admin boundary hardening; permission set governance in AWS IAM Identity Center.
- Experience decommissioning legacy federation (e. g., ADFS) and consolidating identity platforms.
- Scripting/coding for automation and configuration (Power Shell and/or Python; Okta Workflows).
- Threat modeling and architecture review focused on identity misuse, consent abuse, token/session risks, and cloud account takeover.
- SIEM/SOAR integration experience, ideally with Microsoft Sentinel (data connectors incl. Entra, M365, Okta, AWS Cloud Trail), analytics rules, playbooks, and incident workflows.
Benefits
- Competitive medical insurance
- Group retirement plans
- Vision insurance
- Dental insurance
- Significant paid time off
- Preferential partner discounts
- Employee mental health awareness days
- #J-18808-Ljbffr
