security engineer in investment management

Man Group; Greater London; Hybrid; GBP 90,000 - 140,000; Full time

Benefits offered by this job

Flexible working arrangements

Mankind volunteering days

Competitive holiday entitlement and保障

Job summary

Man Group in London is seeking an experienced security platform engineer to design, build and operate platform services and APIs, with a focus on policy decision, just-in-time access and short-lived credentials.

You will write policy-as-code, integrate with identity providers, secrets management, and observe reliability, performance and security; mentoring application teams and AI-agent developers with clear documentation.

Qualifications

• Hands-on experience building and operating production services with Python.
• Experience with Kubernetes, Linux and containerised environments, including networking fundamentals and performance troubleshooting.
• Strong understanding of authentication, authorisation and secrets management, including OIDC/OAuth, Azure AD/Entra ID and vault technologies.
• Experience with infrastructure-as-code tools such as Terraform, Ansible or Helm, and GitOps-based deployment.
• Working knowledge of observability stacks such as ELK, Prometheus and Grafana, including building dashboards and alerting rules.
• Clear communication and a structured approach to reasoning about risk.
• Bonus: advanced Kubernetes concepts, policy engines and workload identity technologies.

Responsibilities

• Design, build and operate security platform services and APIs, including policy decision, just-in-time access and short-lived credential issuance.
• Write and maintain tested, version-controlled policy-as-code deployed through GitOps.
• Integrate the platform with identity providers, secrets management and existing internal infrastructure.
• Run services to production standards for reliability, performance and observability, including second-line on-call support.
• Provide Python APIs and onboard application teams and AI-agent developers to the platform, with documentation that makes the secure path easy.
• Build logging, metrics and alerting for platform services, and contribute SIEM detection rules.

Skills

Python

Kubernetes

Linux

Containers

Networking basics

Observability

Identity & Secrets

Tools

Terraform

Ansible

Helm

GitOps

ELK

Prometheus

Grafana

Job description

Описание

Man Group is a global alternative investment management firm that pursues outperformance for sophisticated clients through its Systematic, Discretionary and Solutions offerings. Its investment strategies span public and private markets and all major asset classes, with a significant focus on alternatives.

Задачи

• Design, build and operate security platform services and APIs, including policy decision, just-in-time access and short-lived credential issuance
• Write and maintain tested, version-controlled policy-as-code deployed through GitOps
• Integrate the platform with identity providers, secrets management and existing internal infrastructure
• Run services to production standards for reliability, performance and observability, including second-line on-call support
• Provide Python APIs and onboard application teams and AI-agent developers to the platform, with documentation that makes the secure path easy
• Build logging, metrics and alerting for platform services, and contribute SIEM detection rules

Требования

• Hands-on experience building and operating production services with Python
• Experience with Kubernetes, Linux and containerised environments, including networking fundamentals and performance troubleshooting
• Solid understanding of authentication, authorisation and secrets management, including OIDC/OAuth, Azure AD/Entra ID and vault technologies
• Experience with infrastructure-as-code tools such as Terraform, Ansible or Helm, and GitOps-based deployment
• Working knowledge of observability stacks such as ELK, Prometheus and Grafana, including building dashboards and alerting rules
• Clear communication and a structured approach to reasoning about risk
• Будет плюсом: advanced Kubernetes knowledge, including network policies, pod security standards, admission controllers and resource quota enforcement; policy engines and workload identity such as OPA/Rego, Kyverno, Cedar, OpenFGA, SPIFFE/SPIRE and Envoy/service mesh; REST/gRPC API design for internal platform consumers; network security controls such as WAFs, segmentation, TLS termination and egress filtering

Условия

• Flexible working arrangements are available
• Two annual paid "Mankind" days for community volunteering
• Benefits include competitive holiday entitlements, pension/401k, life and long-term disability coverage, group sick pay, enhanced parental leave and long-service leave
• Depending on location, additional benefits may include private medical coverage, discounted gym membership options and pet insurance