Senior Security Engineer - CIAM

Barclays Bank PLC; London; On-site; GBP 70,000 - 90,000; Full time

Job summary

Join a leading financial institution as a Senior Security Engineer, where you'll enhance digital security and collaborate with cross-functional teams. This role involves developing security solutions, managing risks, and implementing best practices to safeguard sensitive information.

Qualifications

• Experience with AWS security controls and automation.
• Strong coding skills in JavaScript, Java, or Python.
• Hands-on configuration of IAM solutions.

Responsibilities

• Develop and maintain security protocols and software applications.
• Conduct audits to assess vulnerabilities.
• Collaborate with teams to align cryptographic solutions with business objectives.

Skills

Cloud Security

Penetration Testing

Risk and Controls

DevSecOps

Collaboration

Tools

AWS

GitLab CI/CD

Chef

ForgeRock

Job description

Join us as a Senior Security Engineer for CIAM at Barclays, where you will bring to life a new digital platform capability, transforming and modernising our digital estate to build a market-leading digital offering with customer experience at its heart.

This is an exciting and key role, partnering with business aligned engineering and product teams, to ensure a collaborative team culture is at the heart of what we do.

To be successful in this role you should have:

• Experience across configuration and integration with Hardware Security Module (HSM) and AWS Secrets Manager (ASM) tooling, certificate lifecycle management, e.g., rotation, revocation, and in automating security workflows
• Experience using GitLab CI/CD pipelines, AWS CLI or Chef.
• Strong experience with Cloud Security expertise across areas such as AWS security controls, policies and automation, CLI tools, role-based and attribute-based access controls, cryptographic protocols and secure key lifecycle management, advanced threat modelling, SOC operations, securing microservices and APIs, DevSecOps best practices, vulnerability scanning, tools, approaches, vulnerability patching, and vendor management for security
• Strong experience in penetration testing and hands-on coding in JavaScript, Java, or Python.

Some other highly desirable skills include experience in hands-on configuration, deployment, and operation of ForgeRock COTS based IAM solutions (PingGateway, PingAM, PingIDM, PingDS) with embedded security gates, HTTP header signing, access token and data at rest encryption, PKI based self-sovereign identity, or open source.

You may be assessed on key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen, strategic thinking, digital and technology, as well as job-specific technical skills.

This role will be based out of our London office.

Purpose of the role

To develop, implement, and maintain solutions that support the safeguarding of the bank's systems and sensitive information.

Accountabilities

• Provision of subject matter expertise on security systems and engineering patterns.
• Development and implementation of protocols, algorithms, and software applications to protect sensitive data and systems.
• Management and protection of secrets, ensuring that they are securely generated, stored, and used.
• Execution of audits to monitor, identify, and assess vulnerabilities in the bank's infrastructure/software and support the response to potential security breaches.
• Identification of advancements to support the innovation and adoption of new cryptographic technologies and techniques.
• Collaboration across the bank, including developers and security teams, to ensure cryptographic solutions align with business objectives, security policies, and regulatory requirements.
• Development/Implementation and maintenance of Identity and Access Management solutions and systems.

...