Lead Identity & Security Engineer (12 Month FTC)

AND Digital; Greater London; On-site; GBP 90,000 - 110,000; Full time

Benefits offered by this job

Blended working

Dedicated career scrum team

Training budget for upskilling

Team socials

Supportive, inclusive culture

Job summary

AND Digital is seeking a Lead Identity & Security Engineer to drive the design, development and operation of authentication and authorisation services across the Accounts platform. You will provide technical leadership, mentor engineers and collaborate with cross-functional teams to embed identity across applications and integrations.

The role focuses on token-based authentication, secure identity solutions, and ensuring security best practices are followed from design through implementation,

Qualifications

• Proficiency with OAuth 2.0 and OpenID Connect in production.
• Experience with JSON Web Tokens (JWT) and token-based auth.
• Experience with IdPs and enterprise IAM solutions.
• Java development of secure, production-grade backend services.
• Git-based delivery with modern CI/CD practices.
• Kubernetes and containerised environments.
• AWS in cloud security and infrastructure.
• Designing secure APIs and distributed systems.

Responsibilities

• Lead design, development and operation of identity and access management across the Accounts platform.
• Provide technical leadership for token-based authentication and authorisation services (JWT).
• Design and implement secure identity solutions using industry standards.
• Guide secure application and integration patterns from design to implementation.
• Promote engineering standards and best practices for identity and security.
• Mentor other engineers in identity and security topics.
• Collaborate with architecture, platform, application engineering and security teams.
• Contribute to reliability, scalability, observability and operational maturity of identity services.
• Produce and review technical docs, architecture decisions and security guidance.
• Identify security risks and continuously improve the platform's security posture.

Skills

OAuth 2.0 / OIDC

JWT tokens

Identity providers (IdP)

Java backend

Git / CI/CD

Kubernetes

AWS security

Secure APIs

Security fundamentals

Job description

Lead Identity & Security Engineer - 12 Month FTC

Who We Are:
AND Digital are a tech company focused on accelerating digital delivery and dedicated to closing the digital skills gap. We’ve been helping organisations build better digital products and stronger digital teams since 2014.

We believe our work should always leave a legacy for the client. We do this through close relationships with our offices (or ‘Clubs’) so that our partners are always prioritised by a regional team close to them.

This unique model has driven success for our clients and ourselves, evidenced by our remarkable organic growth since 2014. Today we number more than 1,300 people with Clubs all over the UK and Europe with plans for global expansion in the next couple of years.

Join us - and help us fulfil our mission to close the world’s digital skills gap.

The Role

We are looking for a Lead Identity & Security Engineer to take a leading role in the design, development and operation of the services that underpin authentication and authorisation across the Accounts platform.

You will provide technical leadership across identity and security engineering, helping to build resilient, secure and scalable identity capabilities aligned with industry standards and best practice. You will work closely with engineering, architecture and security teams to ensure identity is embedded effectively across applications and integrations.

Key Responsibilities

• Lead the design, development and operation of identity and access management capabilities across the Accounts platform.
• Provide technical leadership for token-based authentication and authorisation services, including JWT token services.
• Design and implement secure identity solutions using established industry standards and protocols.
• Lead the development of secure application and integration patterns, ensuring authentication and authorisation requirements are considered from design through to implementation.
• Establish and promote engineering standards, patterns and best practices for identity and security.
• Provide technical guidance and mentoring to other engineers across identity and security.
• Work collaboratively with architecture, platform, application engineering and security teams to solve complex identity challenges.
• Contribute to the reliability, scalability, observability and operational maturity of identity services.
• Produce, maintain and review technical documentation, architecture decisions, standards and security guidance.
• Identify and address security risks and continuously improve the security posture of the platform.

Experience & Technical Skills

We are particularly interested in candidates with strong experience in:

• OAuth 2.0 and OpenID Connect, including practical implementation and troubleshooting.
• JSON Web Tokens (JWT) and token-based authentication and authorisation.
• Identity Providers (IdPs) and enterprise identity and access management solutions.
• Java and development of secure, production-grade backend services.
• Git-based software delivery, including modern CI/CD practices.
• Kubernetes and containerised application environments.
• AWS and cloud-based security and infrastructure.
• Designing and implementing secure APIs, integrations and distributed systems.
• Security principles including authentication, authorisation, token lifecycle management, secrets management and least-privilege access.

Why join AND Digital?

We have three values: wonder, share, and delight. These values inform how we work with clients, and our culture: what it feels like to work for AND. We believe collaboration, ambition, curiosity and fun can drive innovation by creating a better environment for problem-solving.

By joining AND, we’ll provide:

• Opportunities to work on projects with big clients and the chance to produce meaningful work that makes a difference to people’s lives.
• A “Blended Working” model, meaning you will be able to work in a range of locations from; your home, in your clubhouse, on a client, as well as just a change of scenery.
• A dedicated career scrum team, designed to help you reach your career goals and develop the skills you need to be your best self.
• An annual budget for training and upskilling, including allocated days off so you don’t have to study in your own free time.
• Monthly and quarterly team socials - on us - ranging from after work drinks, to driving experience days with your fellow club members.
• A safe environment for you to be yourself and challenge yourself.

Equal Opportunities Statement

At AND Digital we embrace diversity and are committed to equal opportunities.

We are actively recruiting for a diverse and inclusive workforce so want to ensure we do everything we can to support your application.

We want you to feel safe and empowered to let us know if you require any adjustments to be made to your application or interview process so please speak to our recruitment team.