Lead Security Engineer: Access & Identity Architecture

CFC; City Of London; On-site; GBP 100,000 - 140,000; Full time

Job summary

CFC is seeking a Lead Security Engineer to shape and deliver security across our networks, devices, identity and access environment. This is a senior individual-contributor role for an engineer who combines strong technical judgement with sustained, hands-on delivery.

You'll design how people, devices, services and non-human identities securely access our systems. You will create reusable security architectures, implement and automate controls, diagnose weaknesses and ensure security remains

Qualifications

• Experience designing and engineering security across enterprise networks, devices, identity and access.
• Strong knowledge of authentication, authorisation, secrets management and least privilege.
• Ability to translate security requirements into concrete controls at scale.

Responsibilities

• Design, implement and operate automated security governance and controls across network, device, identity and access systems.
• Architect reusable security services for enterprise systems with governance, protection, detection, response and recovery.
• Design and implement access controls for human and non-human identities, including AI identities.
• Strengthen authentication, authorisation, secrets management, audit and privilege segmentation across systems.
• Embed security governance and controls into code, cloud and AI architectures.

Skills

Security architecture

Identity and access management

Network security

Cloud security

Threat modelling

Automation

Job description

CFC is seeking a Lead Security Engineer to shape and deliver security across our networks, devices, identity and access environment. This is a senior individual-contributor role for an engineer who combines strong technical judgement with sustained, hands-on delivery.

You'll design how people, devices, services and non-human identities securely access our systems. You will create reusable security architectures, implement and automate controls, diagnose weaknesses and ensure security remains