IAM Security Engineer
HybridLondon, England, United Kingdom
Job Summary
Collaborate with Security, Infrastructure, and Application teams to define and implement IAM roles and policies across AWS and GCP cloud platforms. Design secure Identity & Access Management controls aligned with enterprise standards, build automation libraries for self-service provisioning, and deliver solutions via CI/CD pipelines with automated testing. Develop secure REST and SOAP APIs while contributing to DevOps and Agile delivery practices using Infrastructure as Code tools like Terraform. This six-month contract starts immediately for an experienced engineer with at least four years in cyber security and hands-on cloud-native experience. The role sits within a Tier 1 global financial institution undergoing major technology transformation, focusing on secure software delivery and cloud security engineering.
Required Qualifications
- Minimum 6 years' IT experience, including at least 4 years within Cyber Security/Information Security
- Minimum 3 years' hands-on experience with AWS and/or GCP cloud-native services
- Experience designing enterprise security solutions within Financial Services or other complex global organisations
- Strong knowledge of cloud IAM security models
- Experience using Infrastructure as Code tools including Terraform and CloudFormation
- Demonstrated expertise in Threat Modelling methodologies such as STRIDE, PASTA or MITRE ATT&CK/ATLAS
- Strong understanding of authentication, authorisation, encryption, logging & monitoring, infrastructure security and network segmentation
- Ability to design and review secure technical architectures
- Strong understanding of SDLC and CI/CD pipelines
- Hands-on Python coding experience (Java or Go also considered)
- Experience with automated testing frameworks such as PyTest, Behave or JUnit
- Experience developing secure REST and SOAP web services
- Associate or Professional AWS or GCP Cloud Certification (mandatory)
- Associate or Professional Cyber Security Certification (mandatory)
- Excellent communication and stakeholder management
- Strong analytical and problem-solving skills
- Self-starter with the ability to work independently
- Experience working within Agile and DevOps environments
Desired Qualifications
- CISSP, AWS Security Specialty or Google Professional Cloud Security Engineer
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.