IAM Security Engineer

Financial Conduct Authority; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Hybrid working

25 days holiday

Private healthcare

Non-contributory Pension 8%

Life assurance

Income protection

Job summary

Financial Conduct Authority is seeking an experienced Security Engineering professional to protect FCA digital assets and identity governance in a hybrid cloud environment. You will design, implement and operate IAM, PAM and IGA solutions, and support the onboarding of critical applications.

The role requires hands-on experience with Delinea Secret Server or Saviynt, Microsoft Entra ID, and AWS identity services, plus strong communication and leadership skills to collaborate across the Cyber

Qualifications

• Extensive experience in Security Engineering and enterprise security architecture.
• Deep knowledge of IAM, PAM and IGA.
• Experience with cloud identity and access management tools.

Responsibilities

• Design, implement and optimize IDAM security products and automations.
• Provide technical support and management of the FCA PAM platform.
• Support onboarding of FCA critical applications and manage identity governance controls.

Skills

IAM expertise

PAM knowledge

IGA knowledge

Cloud security

Security operations

Tools

Delinea Secret Server

Saviynt

Microsoft Entra ID

AWS Identity services

Job description

• We regulate financial services firms in the UK, to keep financial markets fair, thriving and effective. By joining us, you’ll play a key part in protecting consumers, driving economic growth, and shaping the future of UK finance services
• The Data, Technology and Innovation (DTI) division enables the FCA to be a digital-first, data-led smart regulator by delivering a secure, agile, and cost-effective technology and data ecosystem that drives better decisions, transparency, and operational efficiency
• Sitting within DTI, the Technology Resilience team safeguards the FCA’s digital assets, services and suppliers to ensure the organisation remains secure and compliant
• Contribute to the design, implementation and optimisation of IDAM security products and automations
• Provide technical support and management of the FCA Privileged Access Management (PAM) platform
• Support the continued onboarding of FCA critical applications
• Work effectively and collaboratively within a team of cloud security engineers, promoting a culture of collaboration
• Provide technical support and management of the FCA Enterprise PKI platform
• Identify and manage AI and Non-Human Identities (NHIs)
• Gain access to a wide range of innovative cyber security tools and applications, exposure to Azure and AWS security platforms, and development opportunities across a multi-technology Cyber team
• Provide technical support and management of the FCA Identity Governance and Administration (IGA) platform

Benefits

• Hybrid working (work from home up to 60% of your time)
• 25 days holiday per year plus bank holidays
• Private healthcare with Bupa
• A non-contributory Pension of at least 8%
• Life assurance
• Income protection

Extensive experience in Security Engineering, supporting enterprise security services, products, and architecture, with deep knowledge of IAM, PAM and IGAWorking knowledge of Delinea Secret Server or Saviynt, including the design, implementation, administration, and optimisation of privileged access management and identity governance controls within an enterprise environmentKnowledge of Microsoft Entra ID and AWS Identity services, with practical experience implementing and managing enterprise identity, authentication, authorization, and access governance solutions across cloud environmentsEffective architectural, leadership, and communication capabilities, with a demonstrated ability to design secure enterprise solutions and effectively communicate complex security concepts to both technical and non-technical stakeholdersDemonstrated knowledge working with cloud computing environments especially Entra/ AzureEffective decision-making and problem-solving skills to address security challenges in dynamic cloud environmentsManaging incidents, problem investigations, undertaking patching & release management activities in addition to managing product risks & mitigation activities