IAM Engineer - Trading Firm

Senior IAM Security Engineer | Financial Services / TradingFull-time, permanent | HybridWe’re hiring a Senior IAM Security Engineer for a financial services business operating a cloud-native technology environment.This is a hands-on engineering role with direct access to the CISO and ownership of critical identity and security capabilities. You’ll help shape the identity security roadmap, build integrations and replace manual processes with reliable automation.The roleDesign and develop privileged access controls, including just-in-time access, session management and least-privilege cloud permissions.Automate identity lifecycle workflows, access reviews, credential rotation and dormant account detection.Strengthen identity governance across AWS, Microsoft Azure and enterprise applications.Lead cryptographic key governance, including HSM ceremonies, quorum controls and key lifecycle standards.Improve secrets and certificate management, while producing clear, audit-ready evidence.Partner with engineering teams and technology vendors to deliver and maintain effective security controls.What you’ll bringSubstantial hands-on IAM and PAM engineering experience, with ownership of production platforms.Deep enterprise PAM expertise—CyberArk preferred, with comparable platforms considered.Strong AWS and Azure identity knowledge, including federation, conditional access and permissions design.Practical identity governance experience using platforms such as SailPoint, Saviynt or equivalent.Hands-on cloud HSM experience, including key ceremonies, quorum custody and non-extractable keys.Strong scripting and API integration skills, using Python or an equivalent language.Experience managing secrets, certificates and technical vendor relationships.Experience in regulated financial services, brokered infrastructure access or PKI would be valuable.Why consider it?A senior individual contributor position offering substantial autonomy, direct engagement with security leadership and the opportunity to shape how identity security is engineered across the business.Interested? Send me a message or share your CV for a confidential conversation.#Hiring #CyberSecurity #IAM #PAM #CloudSecurity