Security engineer for AI platforms

Man Group; Greater London; Hybrid; GBP 140,000 - 190,000; Full time

Benefits offered by this job

Гибкий график

Два дня Mankind для волонтёрства

Страхование жизни и здоровья

Пенсионные и долгосрочная инвалидность

Job summary

Man Group ищет старшего архитектора по безопасности для определения целевой архитектуры и руководства платформами с упором на контроль доступа и безопасность данных. Роль сочетает hands‑on лидерство и стратегическое направление, чтобы обеспечить безопасную разработку и эксплуатацию в быстро развивающейся среде.

Кандидат будет сотрудничать с командами разработчиков, инфраструктуры и AI‑платформ, чтобы балансировать требования безопасности и гибкости, а также участвовать в аудите и регуляторной

Qualifications

• Опыт в архитектуре безопасности и владение архитектурой для production‑платформ.
• Глубокие знания аутентификации, авторизации и управления секретами (OIDC/OAuth, Azure AD/Entra ID, Vault, Keycloak).
• Опыт с Infrastructure‑as‑code и GitOps (Terraform, Ansible, Helm).

Responsibilities

• Определять и владеть целевой архитектурой безопасности для внутренних приложений и платформ, включая идентификацию и секреты.
• Руководить дорожной картой Zero Trust и политикой доступа на уровне ранговых и временных границ.
• Разрабатывать и документировать решения, проводить дизайн‑ревью и обучать инженеров.

Skills

Python

Bash

SQL

Policy‑as‑code

Terraform

Kubernetes

IAM‑и‑управление доступом

Tools

Terraform

Ansible

Helm

Job description

Описание

Man Group’s business is powered by sophisticated technology with AI accelerating the next generation of transformation. Our technology stack is built on modern open-source components, both enabling day-to-day research and development, and supporting our 24hr trading. This senior role will own the security architecture from end-to-end, setting the technical direction for the security platform. This is a hands‑on leadership role.

Задачи

Define and own the target security architecture (components, services and APIs) for internal applications and platforms, covering identity, authorisation and secrets. Set the Zero Trust roadmap: user and machine identity, just‑in‑time and least‑privilege access, and policy enforcement at the point of use. Make and record architectural decisions, balancing risk, delivery speed and operating cost. Publish reference designs and paved‑path patterns so that the default for teams is also the secure one. Lead the design of the security policy engine for scoped time‑bound system and data access. Design and build the platform APIs that applications, AI agents and users call. Mentor engineers and lead design reviews. Work with IAM, Infosec, Security Operations and Infrastructure teams so that controls can be monitored, detected and audited. Working with Developer, Infrastructure and AI platform teams to ensure solutions balance the security and agility requirements of Man. Explain risk clearly to engineers, senior leadership and non‑technical stakeholders, and support audit and regulatory work.

Требования

Significant experience in security engineering or architecture, including end‑to‑end ownership of security architecture for production platforms. Strong Python skills; comfortable with Bash, SQL and log query languages. Policy‑as‑code (e.g., OPA/Rego, Kyverno, Cedar, OpenFGA, SPIFFE/SPIRE). Infrastructure‑as‑code and GitOps (Terraform, Ansible, Helm). Deep understanding of authentication, authorisation and secrets management (OIDC/OAuth, Azure AD/Entra ID, vault, Keycloak) and of access control models. Будет плюсом: Security of AI agents and LLM applications (delegated access, tool‑use authorisation, prompt injection); Hands‑on experience with Kubernetes, Linux and containerised environments, including network policies; Strong grasp of network security controls: firewalls, WAFs, segmentation, TLS termination and egress filtering; A structured approach to threat modelling and risk assessment, and the ability to explain risk clearly to any audience; Experience in financial services or another regulated environment

Условия

Through our external and internal initiatives, partnerships and programmes, you'll find opportunities to grow, develop your talents, and help foster an inclusive environment for all across our firm and industry. You'll have opportunities to make a difference through our charitable and global initiatives, while advancing your career through professional development, and with flexible working arrangements available too. Like all our people, you'll receive two annual 'Mankind' days of paid leave for community volunteering. Our comprehensive benefits package includes competitive holiday entitlements, pension/401k, life and long‑term disability coverage, group sick pay, enhanced parental leave and long‑service leave. Depending on your location, you may also enjoy additional benefits such as private medical coverage, discounted gym membership options and pet insurance.