IAM and Data Protection Specialist

Iceberg; Greater London; Sur place; GBP 90 000 - 140 000; Plein temps

Avantages offerts par ce poste

Health coverage

Pension

Learning & development budget

Résumé du poste

Iceberg, a high-growth fintech in the United Kingdom, seeks an experienced security professional to own the identity and data protection stack. You will lead the design and operation of enterprise identity solutions, including SSO, MFA, and access controls across internal and customer-facing products, while advancing data protection capabilities and audit readiness.

The role offers collaboration with a global team spanning finance, technology and digital assets, with a focus on secure access in

Qualifications

• Hands-on experience delivering and operating enterprise identity and SSO solutions.
• Strong knowledge of SAML, OIDC, OAuth 2.0, SCIM and JWT, including common implementation risks.
• Experience with PAM, JIT access, identity lifecycle management and enterprise identity providers.
• Working knowledge of Terraform, infrastructure as code and scripting.

Responsabilités

• Own and develop the identity provider and SSO estate, including application integrations, MFA and SAML, OIDC and SCIM.
• Deliver identity projects across IGA, passwordless authentication, conditional access and automated joiner, mover and leaver processes.
• Design authentication and access controls for internal systems and customer-facing products, including OAuth 2.0 flows, token handling and session policies.
• Develop data protection capabilities across data classification, DSPM, DLP, encryption, PKI, key management and secrets management.
• Implement privileged access management and just-in-time access controls, ensuring elevated access is approved, time-bound, logged and automatically removed.
• Work with engineering, IT and application owners to improve access governance and review application and API authentication designs.
• Produce audit evidence, monitor identity activity and support investigations into account compromise.
• Use Terraform, infrastructure as code and scripting to automate security controls and reduce manual processes.

Connaissances

Identity & SSO

SAML/OIDC/OAuth

SCIM

JWT

PAM/JIT

Terraform

IaC scripting

Data protection

Outils

Terraform

Description du poste

I’m working with a high-growth financial technology firm specialising institutional finance, algorithmic trading and digital assets. The company provides trading technology and liquidity solutions to institutions, exchanges and digital asset businesses worldwide.

As its infrastructure and operations continue to develop, identity and data protection are central to maintaining secure access, protecting sensitive information and meeting the control standards expected in a regulated financial environment.

Responsibilities

• Own and develop the identity provider and SSO estate, including application integrations, MFA and SAML, OIDC and SCIM.
• Deliver identity projects across IGA, passwordless authentication, conditional access and automated joiner, mover and leaver processes.
• Design authentication and access controls for internal systems and customer-facing products, including OAuth 2.0 flows, token handling and session policies.
• Develop data protection capabilities across data classification, DSPM, DLP, encryption, PKI, key management and secrets management.
• Implement privileged access management and just-in-time access controls, ensuring elevated access is approved, time-bound, logged and automatically removed.
• Work with engineering, IT, HR and application owners to improve access governance and review application and API authentication designs.
• Produce audit evidence, monitor identity activity and support investigations into account compromise.
• Use Terraform, infrastructure as code and scripting to automate security controls and reduce manual processes.

What they’re looking for

• Hands-on experience delivering and operating enterprise identity and SSO solutions.
• Strong knowledge of SAML, OIDC, OAuth 2.0, SCIM and JWT, including common implementation risks.
• Experience with PAM, JIT access, identity lifecycle management and enterprise identity providers.
• Working knowledge of Terraform, infrastructure as code and scripting.
• Experience with data protection technologies, including encryption, key management, PKI or DLP.
• A methodical approach to documentation, change control and audit evidence.
• Someone comfortable working across the wider security function, including application security, incident response and cloud security.
• Experience in regulated financial services or crypto is highly desirable. Customer identity, machine identity, cloud secrets management and agentic AI access management are also highly desired areas of experience.
• Work on critical financial infrastructure: Help secure the identity and data controls behind an always-on trading environment.
• Broad technical ownership: Work across IAM, application authentication, privileged access and data protection.
• Build and automate: Shape security capabilities with an emphasis on infrastructure as code, scripting and reducing manual processes.
• Work closely with engineering: Influence how authentication and access controls are designed and implemented across products and internal systems.
• International environment: Join a global team spanning finance, technology and digital assets, with health coverage, pension and a learning and development budget.