Identity Access Management & Data Protection Specialist

Delphiventures

Greater London

Ibrido

GBP 100.000 - 150.000

Tempo pieno

14 giorni+

Una candidatura completa in un minuto

Curriculum e lettera di presentazione personalizzati, pronti da inviare.

Supera i filtri ATS

Vantaggi offerti da questo lavoro

Health coverage

Learning budget

Team events

Company pension

Global team environment

Descrizione del lavoro

Flowdesk in the United Kingdom seeks a security-focused professional to plan, build and run our identity provider setup and SSO estate, ensuring MFA, SAML/OIDC integrations, and regulator-ready data protection.

You will work with Secure Engineering, IT Operations, HR and product teams, driving IAM projects, PAM/JIT, and audit evidence while maintaining automation-first practices.

Competenze

Hands-on delivery of IdP and SSO rollout.
Experience with SAML, OIDC, OAuth 2.0, SCIM, JWT.
Strong data protection and encryption knowledge.

Mansioni

Own identity provider and SSO estate management.
Design and run Authentication and Access Management for products and tools.
Plan IdP consolidation and passwordless initiatives.
Contribute to joiner/mover/leaver processes across IT and HR.
Implement Data Classification, DSPM and DLP capabilities.
Pilot PAM and JIT access controls and break-glass governance.
Produce evidence for audits and regulators.

Conoscenze

Identity security

SSO rollout experience

SAML/OIDC/OAuth 2.0

Terraform / IaC

Data protection

Auditing & reporting

Documentation & communication

Strumenti

Terraform

Descrizione del lavoro

About Flowdesk

At Flowdesk, we are building the infrastructure powering the next era of global finance. As a full-service digital asset trading and technology firm, we provide liquidity solutions, OTC trading, and market infrastructure that connect digital assets to global markets with institutional-grade precision, transparency, and scale. Flowdesk combines expertise from traditional finance, algorithmic trading, and blockchain technology to deliver always-on trading capabilities across the digital asset ecosystem.

Founded in 2020, we have grown into a global team supporting institutions, exchanges, and token issuers worldwide as the financial system evolves toward tokenized markets.

Why join Flowdesk? You’ll be joining a company operating at the intersection of finance, technology, and crypto – solving complex market problems, building critical infrastructure, and helping shape how digital assets move globally. We move fast, think long term, and work with a strong ownership mindset across engineering, trading, product, operations, and business teams.

Role Description

Identity is the main control point across our SaaS, cloud and internal systems. The Security team makes sure access to sensitive systems is tightly controlled and provable to auditors and regulators, and that the data behind those systems is protected.

In this role you will plan, build and run our identity provider setup and single sign-on estate, including Identity Governance and Administration (IGA) for all Flowdesk identities. You will also cover Data Protection - data encryption, PKI, Key Management, data classification and DLP from a plan, build and run perspective.

You will work as part of the wider security team, alongside Secure Engineering, IT Operations, HR and application owners.

Key Responsibilities

Own the identity provider and SSO estate: onboarding applications, enforcing MFA, and keeping SAML, OIDC and SCIM integrations healthy
Design and run Authentication and Access Management for our own products and internal tools, including OAuth 2.0 flows, token handling and session policy, through Terraform and infrastructure as code where possible
Plan and deliver identity projects, such as IdP consolidation, passwordless, conditional access, IGA and JML automation
Contribute to the joiner, mover and leaver process across the organisation, working with IT Operations, HR and application owners so access follows role and is removed promptly
Design and implement Data Classification, DSPM and DLP capabilities
Design and manage data protection solutions such as HSMs, Key Management, Secrets and Password Management, and PKI-related solutions
Design and run privileged access management (PAM) and just-in-time (JIT) access, so elevated access is granted for a set purpose and time, approved, logged and removed automatically
Help run regular access review campaigns and manage break-glass accounts and service account governance
Review application and API authentication designs with Secure Engineering, and advise teams on best practice implementation
Produce evidence and reporting for audits and regulators
Monitor identity logs for abuse, and help respond to account compromise
Work as part of the wider security team, and cover gaps in other areas when they arise, such as during absences, incidents or peaks in workload

Requirements

Must Have

Several years in identity security and data protection, with hands-on delivery of an IdP and SSO rollout
Deep working knowledge of SAML, OIDC, OAuth 2.0, SCIM and JWT, including common implementation mistakes
Experience with at least one enterprise identity provider and one customer or application identity platform
Experience with PAM and JIT access, ideally for cloud, SaaS and production environments
Experience with the joiner, mover and leaver process, and an understanding of how it works across HR, IT and application teams
Solid understanding of Terraform and infrastructure as code, and the ability to work day to day in an environment where infrastructure is managed that way
Scripting skills (required for the role)
General security knowledge across the main domains
A process-oriented approach: you document what you do, follow change control, and leave an audit trail
Clear writing, since much of the job is documenting decisions and explaining them to auditors and engineers
Willingness to work across the security team and learn adjacent areas, such as incident response, GRC evidence or cloud security, as needed

Preferred

Highly desired

Experience working in a regulated, controlled environment, such as financial services or crypto

Helpful

Customer identity (CIAM) experience
Machine identity and secrets management in cloud and Kubernetes
Agentic AI access management
Relevant certifications (CISSP, CISM, CEH or similar)

Person Profile

Process-oriented: documents decisions, follows change control and leaves a clear audit trail
Clear communicator, able to explain technical decisions to both auditors and engineers
Comfortable working across disciplines and stepping in on adjacent security areas when the team needs it
Pragmatic and automation-minded: prefers infrastructure as code and scripting over manual change
Holds a high bar for control and evidence in a regulated, high-trust environment

Company Culture & Values