Principal Security Engineer — Cloud, IAM & PCI Leadership

Travelport; Langley; Hybrid; GBP 100,000 - 140,000; Full time

Job summary

Travelport in the United Kingdom (Langley) is seeking a Principal Security Engineer to provide deep security expertise across applications, infrastructure, networks, and cloud environments, partnering with Engineering and Architecture to translate strategy into scalable technical solutions.

The ideal candidate has 10+ years in cybersecurity, strong IAM, network security, PCI-DSS experience, and hands-on work with Okta/Auth0, AWS security, and WAF technologies.

Qualifications

• 10+ years of cybersecurity experience in security engineering or related fields.
• Hands-on experience designing and implementing secure architectures.
• Strong knowledge of IAM, cloud security, and network security controls.

Responsibilities

• Serve as a senior security expert across application, network, cloud, and infrastructure security.
• Collaborate with engineering and architecture teams to implement secure environments.
• Translate security principles into practical, scalable designs and controls.
• Lead architecture and design reviews for major applications and platforms.
• Identify risks in proposed architectures and propose pragmatic mitigations.
• Apply best practices to web apps, APIs, microservices, and cloud-native systems.
• Conduct security design reviews, risk assessments, and threat modeling for critical assets.
• Act as escalation point for complex security issues and mentor engineers.

Skills

IAM

Security architecture

Networking security

Cloud security

Threat modeling

Tools

Okta

Auth0

Akamai WAF

AWS IAM

Job description

Travelport in the United Kingdom (Langley) is seeking a Principal Security Engineer to provide deep security expertise across applications, infrastructure, networks, and cloud environments, partnering with Engineering and Architecture to translate strategy into scalable technical solutions.

The ideal candidate has 10+ years in cybersecurity, strong IAM, network security, PCI-DSS experience, and hands-on work with Okta/Auth0, AWS security, and WAF technologies.