IAM Engineer - Trading Firm

Austin Werner; Dubai; Hybrid; AED 400,000 - 700,000; Full time

Job summary

Austin Werner is seeking a Senior IAM Security Engineer to join our hybrid team in Dubai. You will own critical identity and security capabilities, shaping the IAM roadmap, building integrations, and replacing manual processes with automation.

The role involves hands-on engineering across privileged access controls, lifecycle automation, and governance in AWS, Azure, and enterprise apps, with direct access to security leadership.

Qualifications

• Hands-on IAM and PAM engineering with ownership of production platforms.
• CyberArk PAM expertise, with other platforms acceptable.
• AWS and Azure identity knowledge including federation and conditional access.
• Identity governance experience with SailPoint or Saviynt.
• Scripting and API integration skills (Python or equivalent).
• Experience managing secrets, certificates and vendor relationships.
• PKI or regulated financial services experience is valuable.

Responsibilities

• Design and develop privileged access controls, including just-in-time access, session management and least-privilege cloud permissions.
• Automate identity lifecycle workflows, access reviews, credential rotation and dormant account detection.
• Strengthen identity governance across AWS, Microsoft Azure and enterprise applications.
• Lead cryptographic key governance, including HSM ceremonies, quorum controls and key lifecycle standards.
• Improve secrets and certificate management, while producing clear, audit-ready evidence.
• Partner with engineering teams and technology vendors to deliver and maintain effective security controls.

Skills

IAM engineering

PAM expertise

Automation scripting

Python scripting

Identity governance

Cloud identity (AWS/Azure)

Secrets management

PKI familiarity

Tools

CyberArk PAM

SailPoint

Saviynt

AWS IAM

Azure AD

Job description

Senior IAM Security Engineer | Financial Services / Trading

Full-time, permanent | Hybrid

We’re hiring a Senior IAM Security Engineer for a financial services business operating a cloud-native technology environment.

This is a hands‑on engineering role with direct access to the CISO and ownership of critical identity and security capabilities. You’ll help shape the identity security roadmap, build integrations and replace manual processes with reliable automation.

The role

• Design and develop privileged access controls, including just-in-time access, session management and least-privilege cloud permissions.
• Automate identity lifecycle workflows, access reviews, credential rotation and dormant account detection.
• Strengthen identity governance across AWS, Microsoft Azure and enterprise applications.
• Lead cryptographic key governance, including HSM ceremonies, quorum controls and key lifecycle standards.
• Improve secrets and certificate management, while producing clear, audit-ready evidence.
• Partner with engineering teams and technology vendors to deliver and maintain effective security controls.

What you’ll bring

• Substantial hands‑on IAM and PAM engineering experience, with ownership of production platforms.
• Deep enterprise PAM expertise—CyberArk preferred, with comparable platforms considered.
• Strong AWS and Azure identity knowledge, including federation, conditional access and permissions design.
• Practical identity governance experience using platforms such as SailPoint, Saviynt or equivalent.
• Strong scripting and API integration skills, using Python or an equivalent language.
• Experience managing secrets, certificates and technical vendor relationships.
• Experience in regulated financial services, brokered infrastructure access or PKI would be valuable.

Why consider it?

A senior individual contributor position offering substantial autonomy, direct engagement with security leadership and the opportunity to shape how identity security is engineered across the business.

#Hiring #CyberSecurity #IAM #PAM #CloudSecurity