Senior Security Architect: IAM & Network Defense

CFC; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

CFC is seeking a Lead Security Engineer to shape and deliver security across networks, devices, identity and access. This senior individual-contributor role turns risks into practical, effective controls and architectures, and collaborates across technology teams to secure systems.

You’ll design access controls for human and non-human identities, automate policies, strengthen authentication and privilege segmentation, and guide security across cloud, on-premises and AI deployments.

Qualifications

• Deep experience designing and engineering security across enterprise networks, devices, identity and access.
• Strong understanding of network segmentation and security architecture across cloud systems.
• Hands-on experience implementing identity and access management and privileged-access controls.
• Knowledge of authentication, authorisation, secrets management, audit and least privilege.

Responsibilities

• Design, implement and operate highly automated security governance and controls across network, device, identity and access systems.
• Architect reusable security services for enterprise systems, integrating governance, protection, detection, response and recovery.
• Design and implement access controls for human and non-human identities, including service identities.
• Strengthen authentication, authorisation, secrets management, audit and privilege segmentation.
• Implement scalable access-control models and access policy-as-code.
• Embed security governance and controls into code, cloud and AI architectures.
• Diagnose and remediate identity, infrastructure and access-control weaknesses.
• Lead cross-functional security design and threat-modelling activities.
• Automate security policies and guardrails across workflows and endpoints, including AI augmentation.
• Act as a technical authority for network, device and identity security.

Skills

Security architecture

Identity controls

Privileged access

Network segmentation

Cloud security

Automation

Job description

CFC is seeking a Lead Security Engineer to shape and deliver security across networks, devices, identity and access. This senior individual-contributor role turns risks into practical, effective controls and architectures, and collaborates across technology teams to secure systems.

You’ll design access controls for human and non-human identities, automate policies, strengthen authentication and privilege segmentation, and guide security across cloud, on-premises and AI deployments.