Senior Security Architect & Platform Engineer

Man Group; Greater London; On-site; GBP 120,000 - 180,000; Full time

Job summary

Man Group, headquartered in London, seeks a senior security architect to own security architecture end-to-end for production platforms and AI-enabled systems. You will drive architectural decisions, design policy engines, and build secure platform APIs alongside engineering teams.

You will mentor engineers, lead reviews, and collaborate with IAM, Infosec and DevOps to enforce zero-trust and robust access controls while communicating risk to leadership and regulators.

Qualifications

• Significant experience in security engineering or architecture.
• Strong Python skills; Bash, SQL and log query languages.
• Policy-as-code (e.g., OPA/Rego, Kyverno, Cedar, OpenFGA, SPIFFE/SPIRE).
• Infrastructure-as-code and GitOps (Terraform, Ansible, Helm).
• Deep understanding of authentication, authorisation and secrets management (OIDC/OAuth, Azure AD/Entra ID, vault, Keycloak) and access control models.

Responsibilities

• Define and own the target security architecture for internal applications and platforms, including identity, authorisation and secrets.
• Set the Zero Trust roadmap: identity, just-in-time and least-privilege access, policy enforcement at point of use.
• Make and record architectural decisions balancing risk, delivery speed and operating cost.
• Publish reference designs and paved-path patterns for secure defaults.
• Lead the design of the security policy engine for scoped time-bound system and data access.
• Design and build platform APIs that applications, AI agents and users call.
• Mentor engineers and lead design reviews.
• Collaborate with IAM, Infosec, Security Operations and Infrastructure teams to monitor, detect and audit controls.

Skills

Python

Bash

SQL

OPA/Rego

Kyverno

Cedar

OpenFGA

SPIFFE/SPIRE

Terraform

Ansible

Helm

OIDC/OAuth

Azure AD/Entra ID

vault

Keycloak

Kubernetes

Linux

Tools

GitOps

Job description

Man Group, headquartered in London, seeks a senior security architect to own security architecture end-to-end for production platforms and AI-enabled systems. You will drive architectural decisions, design policy engines, and build secure platform APIs alongside engineering teams.

You will mentor engineers, lead reviews, and collaborate with IAM, Infosec and DevOps to enforce zero-trust and robust access controls while communicating risk to leadership and regulators.