Senior Security Engineer

Iceberg; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Iceberg is hiring a security engineer with a core focus on identity and a broad remit across cloud security, infrastructure and automation.

You’ll be the first identity-focused engineer, shaping the security architecture as the team scales and collaborating with engineering, infrastructure and security teams to implement secure solutions.

Qualifications

• Deep expertise in IAM, PAM, SSO and identity governance.
• Hands-on cloud experience with AWS and/or Azure.
• Terraform, scripting and security automation experience.
• Knowledge of OAuth 2.0, OIDC, SAML and SCIM.
• Collaborates with engineering and security teams on secure designs.

Responsibilities

• Be the first engineer focused on identity with broader security remit.
• Contribute to wider security engineering projects and decisions.
• Design and implement secure solutions across cloud and infra.
• Automate security tooling and influence security infrastructure at scale.

Skills

IAM

PAM

SSO

Identity governance

AWS

Azure

Terraform

Scripting

Security automation

OAuth 2.0

OIDC

SAML

SCIM

Tools

AWS

Azure

Terraform

Job description

Q4 is busy and I’ve taken on a new client operating in the financial trading space looking to hire into their security team. You will be the first engineer with a focus on identity but with a much border remit across cloud security, infrastructure and automation.

Given the size of the security team, I’m looking for someone with deep identity expertise who can also contribute to wider security engineering projects, influence technical decisions and help shape the organisation's security infrastructure as it continues to scale.

You’ll be a great fit if you have:

• Strong experience across IAM, PAM, SSO and identity governance, including authentication, authorisation and privileged access controls.
• Hands on experience with cloud environments, ideally AWS and/or Azure.
• Experience with Terraform, scripting and security automation.
• Knowledge of identity protocols such as OAuth 2.0, OIDC, SAML and SCIM.
• Experience working with engineering, infrastructure and security teams to design and implement secure solutions.
• Ideally, experience within financial services, trading, fintech or another regulated environment.

Additional experience that would be particularly interesting:

• Machine identity, workload identity and non-human identity lifecycle management.
• PKI, certificate management, encryption, HSMs and key management.
• Secrets management and identity security across Kubernetes and cloud environments.
• Data protection, including DLP, DSPM and data classification.
• Cloud and infrastructure security, DevSecOps or broader security operations.
• Emerging areas such as agentic AI identity and access management.

We're particularly interested in engineers who enjoy building and automating security solutions rather than solely managing existing platforms.

This is an opportunity to join a growing trading business where you'll have real ownership, work closely with engineering and infrastructure teams, and contribute to security projects beyond your core specialism.