Lead Identity & Security Engineer

Jobtailor; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Jobtailor is seeking an Identity and Security lead to design, develop and operate IAM capabilities across the Accounts platform. You will provide technical leadership for token-based authentication and authorisation, including JWT token services, and design secure identity solutions using industry standards.

You will collaborate with architecture, platform, application engineering and security teams to address complex identity challenges, improve reliability and security posture, and mentor

Qualifications

• Experience implementing OAuth 2.0 and OpenID Connect in production.
• Proven JWT-based authentication and token lifecycle management.
• Hands-on with IdPs and enterprise IAM solutions.
• Strong Java backend development and secure API design.

Responsibilities

• Lead the design and operation of identity and access management across the Accounts platform.
• Provide technical leadership for token-based auth services, including JWT.
• Design and implement secure identity solutions using industry standards.
• Mentor engineers and promote engineering best practices in security.
• Collaborate with architecture, security and platform teams on identity challenges.
• Improve reliability, scalability, and operational maturity of identity services.
• Produce and review architecture decisions and security guidance.

Skills

OAuth 2.0

OpenID Connect

JWT

IdPs

Java

CI/CD

Kubernetes

AWS

Security APIs

Secrets management

Least-privilege

Tools

Git

Kubernetes

AWS

Job description

• Lead the design, development and operation of identity and access management capabilities across the Accounts platform
• Provide technical leadership for token-based authentication and authorisation services, including JWT token services
• Design and implement secure identity solutions using industry standards and protocols
• Lead development of secure application and integration patterns
• Ensure authentication and authorisation requirements are addressed from design through implementation
• Establish and promote engineering standards, patterns and best practices for identity and security
• Provide technical guidance and mentoring to other engineers
• Collaborate with architecture, platform, application engineering and security teams on complex identity challenges
• Improve reliability, scalability, observability and operational maturity of identity services
• Produce, maintain and review technical documentation, architecture decisions, standards and security guidance
• Identify and address security risks and continuously improve the platform’s security posture

Requirements

• Strong experience with OAuth 2.0 and OpenID Connect, including practical implementation and troubleshooting
• Experience with JSON Web Tokens (JWT) and token-based authentication and authorisation
• Experience with Identity Providers (IdPs) and enterprise identity and access management solutions
• Java and development of secure, production-grade backend services
• Git-based software delivery and modern CI/CD practices
• Kubernetes and containerised application environments
• AWS and cloud-based security and infrastructure
• Designing and implementing secure APIs, integrations and distributed systems
• Knowledge of authentication, authorisation, token lifecycle management, secrets management and least-privilege access

Core Competencies

Demonstrates expertise in designing and implementing secure identity and access management solutions, with a strong focus on token-based authentication, OAuth 2.0, and OpenID Connect. Proven ability to lead technical teams, establish engineering standards, and enhance security posture across platforms.

Highest-signal resume keywords

• OAuth 2.0 Implementation
• OpenID Connect
• JWT Token Services
• Identity Providers (IdPs)
• AWS Cloud Security

ATS Optimization Keywords

Hard Skills

• Token-Based Authentication
• Secure API Design
• Java Development
• Kubernetes
• CI/CD Practices
• Distributed Systems
• Secrets Management
• Least-Privilege Access
• Authentication Management
• Authorisation Management

Soft Skills

• Technical Leadership
• Mentoring
• Collaboration

Industry Keywords

• Identity and Access Management
• Security Standards
• Engineering Best Practices
• Operational Maturity
• Security Posture

Tools & Technologies

• Git
• AWS
• Kubernetes