Identity Access Management & Data Protection Specialist

Flowdesk

Greater London

On-site

GBP 85,000 - 110,000

Full time

13 days ago

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Health coverage

Team events

Pension scheme

Learning budget

English language workplace

Job summary

Flowdesk is seeking an experienced identity security professional to own the IdP and SSO estate, enforcing MFA and maintaining SAML, OIDC, and SCIM integrations. You will design authentication and access management for Flowdesk products and internal tools, with Terraform and IaC at the core.

You will drive IdP projects, passwordless initiatives, and conditional access, while supporting HR/IT/workflows for joiners, movers and leavers.

Qualifications

Several years in identity security with hands-on IdP and SSO experience.
Deep knowledge of SAML, OIDC, OAuth 2.0, SCIM and JWT.
Experience with at least one enterprise IdP and one customer identity platform.
Experience with PAM and JIT access for cloud/SaaS/production.
Familiarity with joiner/mover/leaver processes across HR/IT/app teams.
Solid Terraform and infrastructure-as-code skills; scripting ability.
General security knowledge across main domains with documentation discipline.
Clear writing and ability to explain decisions to auditors and engineers.

Responsibilities

Own the identity provider and SSO estate with MFA, SAML, OIDC, SCIM integrations.
Design and run authentication and access management for products and internal tools.
Plan and deliver IdP projects like consolidation, passwordless, conditional access, IGA.
Support joiner/mover/leaver processes ensuring access is role-based and removed timely.
Design and implement data classification, DSPM and DLP capabilities.
Manage data protection solutions including PKI, Key Management and Secrets.
Run PAM and JIT access with time-bound elevated permissions and audit trails.
Assist audits by producing evidence and regulator-facing reports.
Monitor identity logs and respond to account compromise; cover gaps as needed.

Skills

Identity security

SSO

SAML

OIDC

OAuth 2.0

SCIM

JWT

Terraform

Scripting

Data protection

Tools

Terraform

PAM

Job description

About Flowdesk

At Flowdesk, we are building the infrastructure powering the next era of global finance. As a full-service digital asset trading and technology firm, we provide liquidity solutions, OTC trading, and market infrastructure that connect digital assets to global markets with institutional-grade precision, transparency, and scale. Flowdesk combines expertise from traditional finance, algorithmic trading, and blockchain technology to deliver always-on trading capabilities across the digital asset ecosystem.

About Flowdesk

Founded in 2020, we have grown into a global team supporting institutions, exchanges, and token issuers worldwide as the financial system evolves toward tokenized markets.

Why join Flowdesk? You’ll be joining a company operating at the intersection of finance, technology, and crypto – solving complex market problems, building critical infrastructure, and helping shape how digital assets move globally. We move fast, think long term, and work with a strong ownership mindset across engineering, trading, product, operations, and business teams.

Role Description

Identity is the main control point across our SaaS, cloud and internal systems. The Security team makes sure access to sensitive systems is tightly controlled and provable to auditors and regulators, and that the data behind those systems is protected.

In this role you will plan, build and run our identity provider setup and single sign-on estate, including Identity Governance and Administration (IGA) for all Flowdesk identities. You will also cover Data Protection - data encryption, PKI, Key Management, data classification and DLP from a plan, build and run perspective.

You will work as part of the wider security team, alongside Secure Engineering, IT Operations, HR and application owners.

Key Responsibilities

Own the identity provider and SSO estate: onboarding applications, enforcing MFA, and keeping SAML, OIDC and SCIM integrations healthy
Design and run Authentication and Access Management for our own products and internal tools, including OAuth 2.0 flows, token handling and session policy, through Terraform and infrastructure as code where possible
Plan and deliver identity projects, such as IdP consolidation, passwordless, conditional access, IGA and JML automation
Contribute to the joiner, mover and leaver process across the organisation, working with IT Operations, HR and application owners so access follows role and is removed promptly
Design and implement Data Classification, DSPM and DLP capabilities
Design and manage data protection solutions such as HSMs, Key Management, Secrets and Password Management, and PKI-related solutions
Design and run privileged access management (PAM) and just-in-time (JIT) access, so elevated access is granted for a set purpose and time, approved, logged and removed automatically
Help run regular access review campaigns and manage break-glass accounts and service account governance
Review application and API authentication designs with Secure Engineering, and advise teams on best practice implementation
Produce evidence and reporting for audits and regulators
Monitor identity logs for abuse, and help respond to account compromise
Work as part of the wider security team, and cover gaps in other areas when they arise, such as during absences, incidents or peaks in workload

Requirements

Must Have

Several years in identity security and data protection, with hands-on delivery of an IdP and SSO rollout
Deep working knowledge of SAML, OIDC, OAuth 2.0, SCIM and JWT, including common implementation mistakes
Experience with at least one enterprise identity provider and one customer or application identity platform
Experience with PAM and JIT access, ideally for cloud, SaaS and production environments
Experience with the joiner, mover and leaver process, and an understanding of how it works across HR, IT and application teams
Solid understanding of Terraform and infrastructure as code, and the ability to work day to day in an environment where infrastructure is managed that way
Scripting skills (required for the role)
General security knowledge across the main domains
A process-oriented approach: you document what you do, follow change control, and leave an audit trail
Clear writing, since much of the job is documenting decisions and explaining them to auditors and engineers
Willingness to work across the security team and learn adjacent areas, such as incident response, GRC evidence or cloud security, as needed

Preferred

Highly desired

Experience working in a regulated, controlled environment, such as financial services or crypto

Helpful

Customer identity (CIAM) experience
Machine identity and secrets management in cloud and Kubernetes
Agentic AI access management
Relevant certifications (CISSP, CISM, CEH or similar)

Person Profile

Process-oriented: documents decisions, follows change control and leaves a clear audit trail
Clear communicator, able to explain technical decisions to both auditors and engineers
Comfortable working across disciplines and stepping in on adjacent security areas when the team needs it
Pragmatic and automation-minded: prefers infrastructure as code and scripting over manual change
Holds a high bar for control and evidence in a regulated, high-trust environment

Company Culture & Values