Senior Security Engineer — Platform Security & IAM

Man Group; Greater London; On-site; GBP 110,000 - 150,000; Full time

Benefits offered by this job

Mankind days

Pension plan

Health & life insurance

Long-term disability

Job summary

Man Group is seeking a Senior Security Engineer to design, build and operate security platform services and APIs. You will implement policy-as-code, integrate with identity providers and secret management, and ensure production-grade reliability through observability and on-call support.

The role requires hands-on Python development, Kubernetes expertise, and a strong focus on authentication, authorization and secrets management.

Qualifications

• Hands-on experience building and operating production services with Python.
• Using Kubernetes, Linux and containerised environments, including networking fundamentals and performance troubleshooting.
• Solid understanding of authentication, authorisation and secrets management (OIDC/OAuth, Azure AD/Entra ID, vault technologies).
• Experience with infrastructure-as-code (e.g., Terraform, Ansible, Helm) and GitOps-based deployment.
• Working knowledge of observability stacks (e.g., ELK, Prometheus, Grafana), including building dashboards and alerting rules.
• Clear communication and a structured approach to reasoning about risk.
• Kubernetes knowledge beyond basic usage: network policies, pod security standards, admission controllers and resource quota enforcement.
• Policy engines and workload identity (e.g., OPA/Rego, Kyverno, Cedar, OpenFGA, SPIFFE/SPIRE, Envoy/service mesh).
• API design (REST/gRPC) for internal platform consumers.
• Network security controls: WAFs, segmentation, TLS termination and egress filtering.

Responsibilities

• Design, build and operate security platform services and APIs such as policy decision, just-in-time access and short-lived credential issuance.
• Write and maintain policy-as-code that is tested, version-controlled and deployed through GitOps.
• Integrate the platform with identity providers (Entra/AD), secrets management (Vault) and existing internal infrastructure (Keycloak, Sailpoint).
• Run services to production standards for reliability, performance and observability, including 2nd line on-call support.
• Provide Python APIs and onboard application teams and AI-agent developers to the platform, with documentation that make the secure path the easy one.
• Build logging, metrics and alerting for platform services, and contribute SIEM detection rules.

Skills

Python

Kubernetes

Linux

OAuth/OIDC

Azure AD/Entra ID

Vault / Secrets management

Terraform

Ansible

GitOps

Observability (ELK/Prometheus/Grafana)

API design (REST/gRPC)

Tools

Keycloak

Sailpoint

Vault

Entra ID

Helm

Terraform

Ansible

Job description

Man Group is seeking a Senior Security Engineer to design, build and operate security platform services and APIs. You will implement policy-as-code, integrate with identity providers and secret management, and ensure production-grade reliability through observability and on-call support.

The role requires hands-on Python development, Kubernetes expertise, and a strong focus on authentication, authorization and secrets management.