Senior Security Engineer - CIAM

Barclays UK; London; On-site; GBP 60,000 - 100,000; Full time

Job summary

An established industry player is seeking a Senior Security Engineer to enhance their digital platform capabilities. In this pivotal role, you will collaborate with engineering and product teams to ensure a secure and modern digital environment. Your expertise in cloud security, cryptographic technologies, and identity management will be crucial in safeguarding sensitive information. This position offers the opportunity to influence security strategies and contribute to a culture of continuous improvement. Join a dynamic team committed to excellence and innovation in the financial sector.

Qualifications

• Experience in security systems and engineering patterns.
• Hands-on coding in JavaScript, Java, or Python.

Responsibilities

• Develop and maintain solutions to safeguard systems and information.
• Conduct audits to identify vulnerabilities and respond to breaches.

Skills

Hardware Security Modules (HSM)

AWS Secrets Manager (ASM)

GitLab CI/CD

AWS CLI

JavaScript

Java

Python

Cloud Security

DevSecOps Practices

Vulnerability Scanning

Education

Bachelor's Degree in Computer Science or related field

Tools

AWS

ForgeRock IAM

Chef

Job description

Join us as a Senior Security Engineer for CIAM at Barclays, where you will bring to life a new digital platform capability, transforming and modernising our digital estate to build a market-leading digital offering with customer experience at its heart.

This is an exciting and key role, partnering with business aligned engineering and product teams, to ensure a collaborative team culture is at the heart of what we do.

To be successful in this role you should have:

• Experience with configuration and integration of Hardware Security Modules (HSM) and AWS Secrets Manager (ASM), including certificate lifecycle management (rotation, revocation) and automation of security workflows.
• Experience using GitLab CI/CD pipelines, AWS CLI, or Chef.
• Strong cloud security expertise in areas such as AWS security controls, policies, automation, CLI tools, role-based and attribute-based access controls, cryptographic protocols, secure key lifecycle management, threat modeling, SOC operations, securing microservices and APIs, DevSecOps practices, vulnerability scanning, patching, and vendor management.
• Hands-on coding experience in at least one: JavaScript, Java, or Python.

Additional highly desirable skills include:

• Experience configuring, deploying, and operating ForgeRock IAM solutions (PingGateway, PingIDM, etc.), with security features like header signing, token encryption, PKI identity, or open source solutions.

This role will be based in our London office.

Purpose of the role

Develop, implement, and maintain solutions to safeguard the bank’s systems and sensitive information.

Accountabilities

• Provide expertise on security systems and engineering patterns.
• Develop protocols, algorithms, and applications for data and system protection.
• Manage and secure secrets throughout their lifecycle.
• Conduct audits to identify vulnerabilities and respond to security breaches.
• Research advancements in cryptographic technologies and integrate them.
• Collaborate across teams to ensure cryptographic solutions meet security policies and regulations.
• Develop and maintain Identity and Access Management systems.

Vice President Expectations

• Contribute to strategy, requirements, and policy development; manage resources and budgets; drive continuous improvement.
• If managing a team, define roles, plan for future needs, and lead performance management.
• Demonstrate leadership behaviors: Listen, Energize, Align, Develop.
• For individual contributors, serve as a subject matter expert, guide technical direction, and mentor others.
• Advise stakeholders on impact and alignment.
• Manage risks and strengthen controls.
• Understand organizational functions to support business goals.
• Build relationships and influence stakeholders.
• Analyze complex problems and develop innovative solutions.
• Research and incorporate new findings into work.
• Maintain trusting relationships with internal and external stakeholders to achieve business objectives.

All colleagues are expected to embody Barclays Values: Respect, Integrity, Service, Excellence, and Stewardship, and to demonstrate the Barclays Mindset: Empower, Challenge, Drive.