Identity & Data Protection Architect (IAM, PAM)

Flowdesk Group; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

Flowdesk, a London-based digital asset trading and tech firm, is seeking an Identity Access Management & Data Protection Specialist to lead the IdP and SSO strategy across SaaS, cloud and internal tools.

You will implement identity governance and data protection controls, include PKI, data classification, and DLP, and collaborate with Secure Engineering, IT Operations, HR and application owners to maintain strong access controls and regulator-ready audit trails.

Qualifications

• Hands-on delivery of IdP and SSO rollout.
• Deep knowledge of SAML, OIDC, OAuth 2.0, SCIM and JWT.
• Experience with at least one enterprise identity provider.
• Experience with PAM and JIT access.
• Experience with joiner, mover and leaver processes.
• Proficiency in Terraform and IaC.

Responsibilities

• Own the identity provider and SSO estate: onboarding applications, enforcing MFA, and keeping SAML, OIDC and SCIM integrations healthy.
• Design and run Authentication and Access Management for our products and internal tools, including OAuth 2.0 flows and token handling.
• Plan and deliver identity projects (IdP consolidation, passwordless, conditional access, IGA, JML).
• Contribute to joiner/mover/leaver processes and ensure access follows role and is removed promptly.
• Design and implement Data Classification, DSPM and DLP capabilities.
• Design and manage data protection solutions such as HSMs, Key Management, Secrets and PKI-related solutions.

Skills

Identity security

SSO

SAML

OIDC

OAuth 2.0

SCIM

Terraform

Scripting

Audit & compliance

Data protection

Tools

Terraform

Job description

Flowdesk, a London-based digital asset trading and tech firm, is seeking an Identity Access Management & Data Protection Specialist to lead the IdP and SSO strategy across SaaS, cloud and internal tools.

You will implement identity governance and data protection controls, include PKI, data classification, and DLP, and collaborate with Secure Engineering, IT Operations, HR and application owners to maintain strong access controls and regulator-ready audit trails.