SailPoint IAM Engineer Position Description At CGI, you'll help organisations strengthen security, improve governance, and accelerate digital transformation through robust identity and access management solutions. As a SailPoint IAM Engineer, you will play a key role in delivering secure, scalable identity governance capabilities across complex hybrid environments, enabling clients to reduce risk, improve compliance, and enhance operational efficiency. Working alongside talented security, infrastructure, and application specialists, you'll have the opportunity to influence strategic IAM initiatives, contribute innovative solutions, and take ownership of high-impact technical delivery while continuing to develop your expertise within a collaborative and supportive environment. CGI was recognised in the Sunday Times Best Places to Work List 2025 and has been named a UK 'Best Employer' by the Financial Times. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you'll be part of an open, friendly community of experts. We'll train and support you in taking your career wherever you want it to go. Due to the secure nature of the programme, you will need to hold UK Security Clearance or be eligible to go through this clearance. This is a hybrid position. Your future duties and responsibilities In this role, you will design, implement, and enhance SailPoint IdentityIQ (IIQ) and Identity Security Cloud (ISC) solutions within large-scale enterprise environments. You will support the delivery of identity governance and administration capabilities, helping clients strengthen security, improve compliance, and streamline identity lifecycle management processes. Working across security, infrastructure, and application teams, you will take ownership of technical delivery, contribute innovative solutions, and support the successful execution of IAM transformation initiatives. You will play a key role in integrating SailPoint with enterprise platforms, developing provisioning and governance capabilities, and ensuring IAM services remain secure, scalable, and aligned with business requirements. You'll be supported by experienced colleagues while having the autonomy to drive outcomes and solve complex technical challenges. Key responsibilities: -Design & Deliver SailPoint IIQ and ISC solutions across hybrid environments -Develop & Enhance Joiner, Mover, Leaver (JML) processes -Configure & Optimise access requests, approval workflows, and certification campaigns -Implement & Support application onboarding and connector integrations -Drive RBAC and access governance initiatives -Integrate & Automate SailPoint connectivity with Entra ID, Active Directory, HR systems, and cloud applications -Collaborate & Resolve IAM-related issues with cross-functional teams -Support & Strengthen audit, compliance, and governance requirements -Produce & Maintain technical documentation and implementation artefacts -Contribute & Innovate within IAM transformation and optimisation programmes Required qualifications to be successful in this role To succeed in this role, you will bring strong hands-on SailPoint implementation experience alongside a solid understanding of identity governance, access management, and enterprise security principles. You should be comfortable working within complex hybrid environments, integrating multiple platforms and technologies, and delivering high-quality IAM solutions in fast-paced project settings. Essential qualifications and experience: -Strong hands-on experience with SailPoint IdentityIQ (IIQ) and/or SailPoint Identity Security Cloud (ISC) -Proven delivery experience within enterprise IAM and IGA programmes -Strong understanding of Identity Governance & Administration (IGA) principles -Experience implementing RBAC, Least Privilege, Segregation of Duties (SoD), and identity lifecycle management -Expertise configuring access requests, approval workflows, certifications, and provisioning integrations -Experience integrating SailPoint with Microsoft Entra ID (Azure AD), LDAP, Active Directory, HR platforms, and cloud applications -Strong scripting and automation skills using PowerShell, APIs, Java, and/or BeanShell -Experience working within hybrid cloud environments -Proven ability to troubleshoot and resolve complex IAM integration challenges -Strong stakeholder engagement and communication skills -Ability to work independently and deliver within enterprise-scale programmes Desirable qualifications and experience: -Experience with CyberArk or other Privileged Access Management (PAM) technologies -Experience supporting SailPoint ISC migrations or hybrid IIQ/ISC environments -Experience across Azure, AWS, and/or GCP -Understanding of Zero Trust security principles -SailPoint certifications -Security certifications such as SC-300, CISSP, or CCSP -Experience working within regulated or highly governed environments Together, as owners, let's turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you'll reach your full potential because You are invited to be an owner from day 1 as we work together to bring our Dream to life. That's why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company's strategy and direction. Your work creates value. You'll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You'll shape your career by joining a company built to grow and last. You'll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals. Come join our team-one of the largest IT and business consulting services firms in the world.
Aug 24, 2026
Full time
SailPoint IAM Engineer Position Description At CGI, you'll help organisations strengthen security, improve governance, and accelerate digital transformation through robust identity and access management solutions. As a SailPoint IAM Engineer, you will play a key role in delivering secure, scalable identity governance capabilities across complex hybrid environments, enabling clients to reduce risk, improve compliance, and enhance operational efficiency. Working alongside talented security, infrastructure, and application specialists, you'll have the opportunity to influence strategic IAM initiatives, contribute innovative solutions, and take ownership of high-impact technical delivery while continuing to develop your expertise within a collaborative and supportive environment. CGI was recognised in the Sunday Times Best Places to Work List 2025 and has been named a UK 'Best Employer' by the Financial Times. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you'll be part of an open, friendly community of experts. We'll train and support you in taking your career wherever you want it to go. Due to the secure nature of the programme, you will need to hold UK Security Clearance or be eligible to go through this clearance. This is a hybrid position. Your future duties and responsibilities In this role, you will design, implement, and enhance SailPoint IdentityIQ (IIQ) and Identity Security Cloud (ISC) solutions within large-scale enterprise environments. You will support the delivery of identity governance and administration capabilities, helping clients strengthen security, improve compliance, and streamline identity lifecycle management processes. Working across security, infrastructure, and application teams, you will take ownership of technical delivery, contribute innovative solutions, and support the successful execution of IAM transformation initiatives. You will play a key role in integrating SailPoint with enterprise platforms, developing provisioning and governance capabilities, and ensuring IAM services remain secure, scalable, and aligned with business requirements. You'll be supported by experienced colleagues while having the autonomy to drive outcomes and solve complex technical challenges. Key responsibilities: -Design & Deliver SailPoint IIQ and ISC solutions across hybrid environments -Develop & Enhance Joiner, Mover, Leaver (JML) processes -Configure & Optimise access requests, approval workflows, and certification campaigns -Implement & Support application onboarding and connector integrations -Drive RBAC and access governance initiatives -Integrate & Automate SailPoint connectivity with Entra ID, Active Directory, HR systems, and cloud applications -Collaborate & Resolve IAM-related issues with cross-functional teams -Support & Strengthen audit, compliance, and governance requirements -Produce & Maintain technical documentation and implementation artefacts -Contribute & Innovate within IAM transformation and optimisation programmes Required qualifications to be successful in this role To succeed in this role, you will bring strong hands-on SailPoint implementation experience alongside a solid understanding of identity governance, access management, and enterprise security principles. You should be comfortable working within complex hybrid environments, integrating multiple platforms and technologies, and delivering high-quality IAM solutions in fast-paced project settings. Essential qualifications and experience: -Strong hands-on experience with SailPoint IdentityIQ (IIQ) and/or SailPoint Identity Security Cloud (ISC) -Proven delivery experience within enterprise IAM and IGA programmes -Strong understanding of Identity Governance & Administration (IGA) principles -Experience implementing RBAC, Least Privilege, Segregation of Duties (SoD), and identity lifecycle management -Expertise configuring access requests, approval workflows, certifications, and provisioning integrations -Experience integrating SailPoint with Microsoft Entra ID (Azure AD), LDAP, Active Directory, HR platforms, and cloud applications -Strong scripting and automation skills using PowerShell, APIs, Java, and/or BeanShell -Experience working within hybrid cloud environments -Proven ability to troubleshoot and resolve complex IAM integration challenges -Strong stakeholder engagement and communication skills -Ability to work independently and deliver within enterprise-scale programmes Desirable qualifications and experience: -Experience with CyberArk or other Privileged Access Management (PAM) technologies -Experience supporting SailPoint ISC migrations or hybrid IIQ/ISC environments -Experience across Azure, AWS, and/or GCP -Understanding of Zero Trust security principles -SailPoint certifications -Security certifications such as SC-300, CISSP, or CCSP -Experience working within regulated or highly governed environments Together, as owners, let's turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you'll reach your full potential because You are invited to be an owner from day 1 as we work together to bring our Dream to life. That's why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company's strategy and direction. Your work creates value. You'll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You'll shape your career by joining a company built to grow and last. You'll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals. Come join our team-one of the largest IT and business consulting services firms in the world.
Technical Infrastructure Architect (DV Security Clearance) Position Description At CGI, we empower our architects to shape the future of secure digital transformation. As a Technical Architect, you'll design and deliver a next-generation on-premise identity solution that underpins the resilience and security of our clients' most critical systems. You'll help define and implement a scalable, future-ready access management platform that ensures seamless connectivity and trust across complex environments. This is your opportunity to take ownership of a greenfield solution that drives real-world impact, harnessing creativity and technical excellence to help CGI's clients stay ahead in an evolving digital landscape. CGI was recognised in the Sunday Times Best Places to Work List 2025 and has been named a UK 'Best Employer' by the Financial Times. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you'll be part of an open, friendly community of experts. We'll train and support you in taking your career wherever you want it to go. Due to the secure nature of the programme, you will need to hold UK Security Clearance or be eligible to go through this clearance. Your future duties and responsibilities You will play a pivotal role in shaping architecture standards, mentoring engineers, and ensuring delivery quality through collaboration and governance. You'll also have the opportunity to innovate, influence design decisions, and help define best practice for CGI's wider identity landscape. Key responsibilities: Lead & Innovate: Drive the design and architecture of a new on-premise identity solution using Windows Server 2022, Active Directory, and ADFS. Develop & Deliver: Define technical standards, principles, and direction for a secure IAM environment. Mentor & Support: Guide engineering teams through build and deployment phases, ensuring alignment with design intent. Integrate & Secure: Design and configure federation services, SSO, and RBAC models aligned to business needs. Collaborate & Govern: Partner with security, networking, and application teams to ensure smooth integration and operational readiness. Document & Communicate: Produce comprehensive architecture documentation and provide ongoing governance for solution stability and compliance. Required qualifications to be successful in this role You should have strong experience architecting and delivering Microsoft-based identity solutions in secure or regulated environments, with proven expertise in Active Directory, ADFS, and federation technologies. You'll bring both strategic thinking and hands-on technical depth, with excellent communication skills and a collaborative approach to problem-solving. Essential skills and experience: Extensive experience as a Solution or Technical Architect specialising in Microsoft identity solutions. Proven track record delivering greenfield IAM environments. Deep expertise in Windows Server 2022, AD, and ADFS configuration. Strong knowledge of SAML, OAuth 2.0, and OpenID Connect federation models. Experience designing and implementing SSO and RBAC frameworks. Solid understanding of networking fundamentals (DNS, routing, firewalls, load balancing). Proven leadership and mentoring experience with engineering teams. Strong documentation, communication, and stakeholder engagement skills. Desirable: Microsoft Certified: Identity and Access Administrator Associate or Solutions Architect Expert. Experience with hybrid identity integration and PowerShell automation. Prior experience in Defence or secure government environments. Together, as owners, let's turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you'll reach your full potential because You are invited to be an owner from day 1 as we work together to bring our Dream to life. That's why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company's strategy and direction. Your work creates value. You'll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You'll shape your career by joining a company built to grow and last. You'll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. Come join our team-one of the largest IT and business consulting services firms in the world.
Aug 24, 2026
Full time
Technical Infrastructure Architect (DV Security Clearance) Position Description At CGI, we empower our architects to shape the future of secure digital transformation. As a Technical Architect, you'll design and deliver a next-generation on-premise identity solution that underpins the resilience and security of our clients' most critical systems. You'll help define and implement a scalable, future-ready access management platform that ensures seamless connectivity and trust across complex environments. This is your opportunity to take ownership of a greenfield solution that drives real-world impact, harnessing creativity and technical excellence to help CGI's clients stay ahead in an evolving digital landscape. CGI was recognised in the Sunday Times Best Places to Work List 2025 and has been named a UK 'Best Employer' by the Financial Times. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you'll be part of an open, friendly community of experts. We'll train and support you in taking your career wherever you want it to go. Due to the secure nature of the programme, you will need to hold UK Security Clearance or be eligible to go through this clearance. Your future duties and responsibilities You will play a pivotal role in shaping architecture standards, mentoring engineers, and ensuring delivery quality through collaboration and governance. You'll also have the opportunity to innovate, influence design decisions, and help define best practice for CGI's wider identity landscape. Key responsibilities: Lead & Innovate: Drive the design and architecture of a new on-premise identity solution using Windows Server 2022, Active Directory, and ADFS. Develop & Deliver: Define technical standards, principles, and direction for a secure IAM environment. Mentor & Support: Guide engineering teams through build and deployment phases, ensuring alignment with design intent. Integrate & Secure: Design and configure federation services, SSO, and RBAC models aligned to business needs. Collaborate & Govern: Partner with security, networking, and application teams to ensure smooth integration and operational readiness. Document & Communicate: Produce comprehensive architecture documentation and provide ongoing governance for solution stability and compliance. Required qualifications to be successful in this role You should have strong experience architecting and delivering Microsoft-based identity solutions in secure or regulated environments, with proven expertise in Active Directory, ADFS, and federation technologies. You'll bring both strategic thinking and hands-on technical depth, with excellent communication skills and a collaborative approach to problem-solving. Essential skills and experience: Extensive experience as a Solution or Technical Architect specialising in Microsoft identity solutions. Proven track record delivering greenfield IAM environments. Deep expertise in Windows Server 2022, AD, and ADFS configuration. Strong knowledge of SAML, OAuth 2.0, and OpenID Connect federation models. Experience designing and implementing SSO and RBAC frameworks. Solid understanding of networking fundamentals (DNS, routing, firewalls, load balancing). Proven leadership and mentoring experience with engineering teams. Strong documentation, communication, and stakeholder engagement skills. Desirable: Microsoft Certified: Identity and Access Administrator Associate or Solutions Architect Expert. Experience with hybrid identity integration and PowerShell automation. Prior experience in Defence or secure government environments. Together, as owners, let's turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you'll reach your full potential because You are invited to be an owner from day 1 as we work together to bring our Dream to life. That's why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company's strategy and direction. Your work creates value. You'll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You'll shape your career by joining a company built to grow and last. You'll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. Come join our team-one of the largest IT and business consulting services firms in the world.
Description Starling is the UK's first and leading digital bank on a mission to fix banking! We built a new kind of bank because we knew technology had the power to help people save, spend and manage their money in a new and transformative way. We're a fully licensed UK bank with the culture and spirit of a fast-moving, disruptive tech company. We're a bank, but better: fairer, easier to use and designed to demystify money for everyone. We employ more than 3,000 people across our London, Southampton, Cardiff and Manchester offices. Our technologists are at the very heart of Starling and enjoy working in a fast-paced environment that is all about building things, creating new stuff, and disruptive technology that keeps us on the cutting edge of fintech. We operate a flat structure to empower you to make decisions regardless of what your primary responsibilities may be, innovation and collaboration will be at the core of everything you do. Help is never far away in our open culture, you will find support in your team and from across the business, we are in this together! The way to thrive and shine within Starling is to be a self-driven individual and be able to take full ownership of everything around you: From building things, designing, discovering, to sharing knowledge with your colleagues and making sure all processes are efficient and productive to deliver the best possible results for our customers. Our purpose is underpinned by five Starling values: Listen, Keep It Simple, Do The Right Thing, Own It, and Aim For Greatness. Hybrid Working We have a Hybrid approach to working here at Starling - our preference is that you're located within a commutable distance of one of our offices so that we're able to interact and collaborate in person. Requirements As an IAM analyst you will play a critical role in the management and optimisation of Starling's identity lifecycle and across a variety of SaaS and bespoke identity tooling. You will serve as a key liaison to the wider business, bridging the gap between high-level security requirements and practical, automated solutions. Strong communication and interpersonal skills including the ability to explain complex security concepts to technical and non-technical audiences. Good understanding of identity concepts, including authentication protocols, Identity Lifecycle Management, Privileged Access Management, Role Based Access Control and Identity Governance Understanding of risk management, including quantification and remediation. A genuine enthusiasm for identifying security problems and building solutions to them. Experience of design and delivery related to identity and access management platforms, such as Okta . Experience of design and delivery related to Identity Governance Systems, such as ConductorOne . Ability to write code (e.g. automating tasks using scripting languages such as Python). Understanding of authentication protocols (e.g. SAML, OIDC). Strong general cybersecurity domain knowledge, including cloud security (GCP, AWS). Experience of fulfilling a client facing security consulting role or business facing security role. No one day is the same as any other. On any given day you might be: integrating systems with our identity provider for SSO; configuring request and review policies in our access governance system; analysing roles and permissions in third-party services and mapping these to teams and job roles for birthright access; helping end users with complex access issues; defining standards and policies relating to identity and access management; taking ownership of or contributing to projects to improve the bank's identity security posture. We understand the importance of knowledge and expertise remaining current and you'll help us to continue making things better through research, design and implementation of new solutions, including automation. You will actively contribute to us remaining current with Cyber and Identity trends through research and development. Everyone's opinion matters and we embrace a range of perspectives through inception to delivery. We're open-minded when it comes to hiring and we care more about aptitude and attitude than specific experience or qualifications. Responsibilities Independently run and contribute to Identity-related projects Design and implement identity solutions across both a variety of SaaS and bespoke identity tooling Collaborating with engineering and business stakeholders on Identity-related initiatives, including: Reviewing and analysing proposed technical solutions and business processes to identify appropriate security controls. Bridging the gap between complex business needs and technical execution by documenting clear, actionable identity requirements for engineering teams. Advising on remediation of security issues and processes to address root causes. Provide troubleshooting as well as disaster recovery planning and tests Maintain identity and access operations for specific high risk systems Develop processes, guidelines, and documentation for consumption by internal teams Triage and management of IAM security events including, where necessary, participation in IAM security incident management. Maintenance of existing solutions, including operational improvements. Provide training, guidance and mentorship for other team members Security administration and auditing of privileged systems access. Identification and quantification of relevant risks to Starling systems and processes in the context of Starling's desired security posture. Interview Process Interviewing is a two way process and we want you to have the time and opportunity to get to know us, as much as we are getting to know you! Our interviews are conversational and we want to get the best from you, so come with questions and be curious. In general you can expect the below, following a chat with one of our Talent Team: First stage with the IAM leads (team fit) 45 minutes Second stage with additional members of the IAM team (skills and technical) 1 hour Final stage with Infosec Director and CISO 45 minutes Benefits 33 days holiday (including public holidays, which you can take when it works best for you) An extra day's holiday for your birthday Annual leave is increased with length of service, and you can choose to buy or sell up to five extra days off 16 hours paid volunteering time a year Salary sacrifice, company enhanced pension scheme Life insurance at 4x your salary & group income protection Private Medical Insurance with VitalityHealth including mental health support and cancer care. Partner benefits include discounts with Waitrose, Mr&Mrs Smith and Peloton Generous family-friendly policies Incentives refer a friend scheme Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks Access to initiatives like Cycle to Work, Salary Sacrificed Gym partnerships and Electric Vehicle (EV) leasing About us You may be put off applying for a role because you don't tick every box. Forget that! So, if you're excited about working with us, but aren't sure if you're 100% there yet, get in touch anyway. We're on a mission to radically reshape banking - and that starts with our brilliant team. Whatever came before, we're proud to bring together people of all backgrounds and experiences who love working together to solve problems. Starling is an equal opportunity employer, and we're proud of our ongoing efforts to foster diversity & inclusion in the workplace. Individuals seeking employment at Starling are considered without regard to race, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, physical or mental disability, military or veteran status, or any other characteristic protected by applicable law. When you provide us with this information, you are doing so at your own consent, with full knowledge that we will process this personal data in accordance with our Privacy Notice. By submitting your application, you agree that Starling will collect your personal data for recruiting and related purposes. Our Privacy Notice explains what personal information we will process, where we will process your personal information, its purposes for processing your personal information, and the rights you can exercise over our use of your personal information.
Aug 24, 2026
Full time
Description Starling is the UK's first and leading digital bank on a mission to fix banking! We built a new kind of bank because we knew technology had the power to help people save, spend and manage their money in a new and transformative way. We're a fully licensed UK bank with the culture and spirit of a fast-moving, disruptive tech company. We're a bank, but better: fairer, easier to use and designed to demystify money for everyone. We employ more than 3,000 people across our London, Southampton, Cardiff and Manchester offices. Our technologists are at the very heart of Starling and enjoy working in a fast-paced environment that is all about building things, creating new stuff, and disruptive technology that keeps us on the cutting edge of fintech. We operate a flat structure to empower you to make decisions regardless of what your primary responsibilities may be, innovation and collaboration will be at the core of everything you do. Help is never far away in our open culture, you will find support in your team and from across the business, we are in this together! The way to thrive and shine within Starling is to be a self-driven individual and be able to take full ownership of everything around you: From building things, designing, discovering, to sharing knowledge with your colleagues and making sure all processes are efficient and productive to deliver the best possible results for our customers. Our purpose is underpinned by five Starling values: Listen, Keep It Simple, Do The Right Thing, Own It, and Aim For Greatness. Hybrid Working We have a Hybrid approach to working here at Starling - our preference is that you're located within a commutable distance of one of our offices so that we're able to interact and collaborate in person. Requirements As an IAM analyst you will play a critical role in the management and optimisation of Starling's identity lifecycle and across a variety of SaaS and bespoke identity tooling. You will serve as a key liaison to the wider business, bridging the gap between high-level security requirements and practical, automated solutions. Strong communication and interpersonal skills including the ability to explain complex security concepts to technical and non-technical audiences. Good understanding of identity concepts, including authentication protocols, Identity Lifecycle Management, Privileged Access Management, Role Based Access Control and Identity Governance Understanding of risk management, including quantification and remediation. A genuine enthusiasm for identifying security problems and building solutions to them. Experience of design and delivery related to identity and access management platforms, such as Okta . Experience of design and delivery related to Identity Governance Systems, such as ConductorOne . Ability to write code (e.g. automating tasks using scripting languages such as Python). Understanding of authentication protocols (e.g. SAML, OIDC). Strong general cybersecurity domain knowledge, including cloud security (GCP, AWS). Experience of fulfilling a client facing security consulting role or business facing security role. No one day is the same as any other. On any given day you might be: integrating systems with our identity provider for SSO; configuring request and review policies in our access governance system; analysing roles and permissions in third-party services and mapping these to teams and job roles for birthright access; helping end users with complex access issues; defining standards and policies relating to identity and access management; taking ownership of or contributing to projects to improve the bank's identity security posture. We understand the importance of knowledge and expertise remaining current and you'll help us to continue making things better through research, design and implementation of new solutions, including automation. You will actively contribute to us remaining current with Cyber and Identity trends through research and development. Everyone's opinion matters and we embrace a range of perspectives through inception to delivery. We're open-minded when it comes to hiring and we care more about aptitude and attitude than specific experience or qualifications. Responsibilities Independently run and contribute to Identity-related projects Design and implement identity solutions across both a variety of SaaS and bespoke identity tooling Collaborating with engineering and business stakeholders on Identity-related initiatives, including: Reviewing and analysing proposed technical solutions and business processes to identify appropriate security controls. Bridging the gap between complex business needs and technical execution by documenting clear, actionable identity requirements for engineering teams. Advising on remediation of security issues and processes to address root causes. Provide troubleshooting as well as disaster recovery planning and tests Maintain identity and access operations for specific high risk systems Develop processes, guidelines, and documentation for consumption by internal teams Triage and management of IAM security events including, where necessary, participation in IAM security incident management. Maintenance of existing solutions, including operational improvements. Provide training, guidance and mentorship for other team members Security administration and auditing of privileged systems access. Identification and quantification of relevant risks to Starling systems and processes in the context of Starling's desired security posture. Interview Process Interviewing is a two way process and we want you to have the time and opportunity to get to know us, as much as we are getting to know you! Our interviews are conversational and we want to get the best from you, so come with questions and be curious. In general you can expect the below, following a chat with one of our Talent Team: First stage with the IAM leads (team fit) 45 minutes Second stage with additional members of the IAM team (skills and technical) 1 hour Final stage with Infosec Director and CISO 45 minutes Benefits 33 days holiday (including public holidays, which you can take when it works best for you) An extra day's holiday for your birthday Annual leave is increased with length of service, and you can choose to buy or sell up to five extra days off 16 hours paid volunteering time a year Salary sacrifice, company enhanced pension scheme Life insurance at 4x your salary & group income protection Private Medical Insurance with VitalityHealth including mental health support and cancer care. Partner benefits include discounts with Waitrose, Mr&Mrs Smith and Peloton Generous family-friendly policies Incentives refer a friend scheme Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks Access to initiatives like Cycle to Work, Salary Sacrificed Gym partnerships and Electric Vehicle (EV) leasing About us You may be put off applying for a role because you don't tick every box. Forget that! So, if you're excited about working with us, but aren't sure if you're 100% there yet, get in touch anyway. We're on a mission to radically reshape banking - and that starts with our brilliant team. Whatever came before, we're proud to bring together people of all backgrounds and experiences who love working together to solve problems. Starling is an equal opportunity employer, and we're proud of our ongoing efforts to foster diversity & inclusion in the workplace. Individuals seeking employment at Starling are considered without regard to race, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, physical or mental disability, military or veteran status, or any other characteristic protected by applicable law. When you provide us with this information, you are doing so at your own consent, with full knowledge that we will process this personal data in accordance with our Privacy Notice. By submitting your application, you agree that Starling will collect your personal data for recruiting and related purposes. Our Privacy Notice explains what personal information we will process, where we will process your personal information, its purposes for processing your personal information, and the rights you can exercise over our use of your personal information.
Location Flexibility: Multiple Locations in Country Posting Start Date: 7/31/26 At Fujitsu, we've been driven to create a sustainable world through innovation since 1935. Today, we lead in digital transformation globally with our 130,000 employees across 50+ countries. We empower our diverse community to achieve greatness through career development and opportunities. Explore our internal positions and join us in shaping a brighter future. Thank you for being a part of Fujitsu. We look forward to growing together toward a brighter future. UK Head of Quantum Reporting into the UK CTO as part of the UK Technology Group, the UK Head of Quantum will establish the UK Quantum function and ensure Fujitsu UK can translate Fujitsu's global quantum capability into market-relevant services, propositions and client outcomes. As the Head, you will be entrusted with building the UK quantum capability from inception, creating the team, governance, delivery approach and global integration model needed to position Fujitsu as a credible quantum leader in the UK market. Your responsibilities will include: 1. Strategic Leadership: Create and lead the UK Quantum function. Develop and execute a UK quantum strategy aligned to Fujitsu UK priorities, Fujitsu Uvance, the UK Technology Group and Fujitsu's global quantum strategy, with a clear value proposition for the UK market. 2. Operating Model Design: Define the UK quantum team operating model, including governance, roles and responsibilities, engagement routes with sectors, bid support, delivery standards, commercial models, assurance processes and integration points into global Fujitsu teams. 3. Global Integration: Act as the UK point of integration into Fujitsu's global quantum ecosystem, including Fujitsu Research Japan, Fujitsu Research Europe, global quantum consulting, artificial intelligence teams, quantum software, digital annealing, HPC and partner-led capabilities. 4. Team Creation & Capability Building: Build and develop a multidisciplinary UK team across quantum consulting, solution architecture, algorithms, quantum-inspired optimisation, HPC, AI integration, business development and delivery. Working with our FUSION lead, establish communities of practice and capability pathways to grow quantum literacy across Fujitsu UK. 5. Technology Focus & Solution Architecture: Working with the UK Chief Architect, shape architectures and customer solutions across quantum technologies, including superconducting qubits, diamond spin qubits, quantum application research packages, error correction, quantum simulation, Digital Annealer, Monaka/HPC, AI-enabled workflows and hybrid quantum-classical solution patterns. 6. Client Engagement & Advisory: Work closely with UK sectors and strategic customers to identify high-value quantum use cases, assess readiness, shape roadmaps and deliver advisory engagements that move clients from awareness and experimentation towards practical adoption. Translate complex physics into business language to bridge the gap in understanding and take both our customers and Fujitsu on the journey. 7. GTM Creation - Consultancy + Product: Working with Portfolio, Partner Team, Enablement, Sales and sector teams, create UK go-to-market propositions for quantum consulting, discovery workshops, proof-of-concept development, optimisation services, simulation, financial services propositions, quantum-HPC-AI integration and industry-specific accelerators. 8. Partner & Ecosystem Development: Working with our partnership team, build relationships with universities, research institutions, Hyperscalers, quantum hardware and software partners, government bodies, standards organisations and key ecosystem players to strengthen Fujitsu's UK market position. 9. Governance, Standards & Responsible Innovation: Working alongside our Centre of digital Enablement (CoDE), establish standards for quantum delivery, assurance, security, ethics, responsible innovation, IP management and compliance, ensuring alignment with Fujitsu global standards, UK policy direction and customer regulatory requirements. 10. Thought Leadership & Market Presence: Act as the UK quantum storyteller and market evangelist, creating compelling narratives, running internal and external events, supporting analyst and marketing activity, publishing points of view and representing Fujitsu at industry forums. Your experience Understanding of the quantum computing landscape, including current maturity, commercial opportunities, adoption barriers and likely industry disruption. Practical experience & knowledge of quantum computing, quantum-inspired optimisation, quantum simulation, hybrid quantum-classical architectures and the relationship between quantum, AI and HPC. Experience establishing a new technology function, centre of excellence or strategic capability within a complex organisation. Experience building, leading and developing multidisciplinary teams across architecture, consulting, engineering, research and business development. Experience defining an operating model, governance structure and delivery approach for an emerging technology capability. Ability to integrate local market needs with global portfolio, research and product strategies. Experience translating advanced technology into commercially compelling propositions, advisory services, proof-of-concepts and repeatable delivery patterns. Broad understanding of UK market demand across financial services, public sector, manufacturing, defence, transport, healthcare, energy and sustainability use cases. Significant experience in senior stakeholder management, including C-suite engagement, customer-facing consulting and internal executive alignment. Experience working with universities, research bodies, partner ecosystems, government programmes and technology alliances. Excellent communication skills, including external keynote speaking, storytelling, marketing support and the ability to explain complex technology to business audiences. High-level understanding of DX technologies, cloud, cybersecurity, data, AI, automation and modern software engineering. Good understanding of business principles, commercial models, pipeline creation and value-based selling. Key outcomes in the first 12 months Published UK quantum strategy, value proposition and three-year roadmap aligned to Fujitsu's global strategy and the UK Technology Group. Established UK quantum operating model, governance forum, engagement process and integration model with global Fujitsu teams. Built the core UK quantum team and launched an internal quantum community to increase awareness and capability across sectors and delivery teams. Created a market-facing portfolio of quantum consulting and proof-of-concept offerings, including quantum-inspired optimisation, simulation, AI integration and HPC-enabled propositions. Identified and progressed priority UK customer opportunities, with a repeatable approach to discovery, qualification, delivery and value measurement. Established strategic partner relationships across academia, research, technology providers and relevant UK ecosystem organisations. Achieve together We are recognised as a responsible and inclusive employer: Not only are we a certified Disability Confident Leader , a Times Top 50 employer for Gender Equality, a Top 75 employer for Social Mobility, accredited with the Living Wage Foundation and a signatory for the Race at Work Charter, but we are also committed to the United Nations standards for LGBTI+ and a Stonewall Top 100 Employer. We are people centric: Our work environments enable you to Be Completely You.Our active people-led Inclusive Community networks are representative of all aspects of diversity and are instrumental in enabling and supporting our innovative approach to inclusion. At Fujitsu, we are committed to an inclusive recruitment process that values the diverse backgrounds and experiences of all applicants. We believe that hiring people from a wide variety of backgrounds makes us stronger, not because it's the right thing to do, but because it allows us to draw on a wider range of perspectives and life experiences.
Aug 20, 2026
Full time
Location Flexibility: Multiple Locations in Country Posting Start Date: 7/31/26 At Fujitsu, we've been driven to create a sustainable world through innovation since 1935. Today, we lead in digital transformation globally with our 130,000 employees across 50+ countries. We empower our diverse community to achieve greatness through career development and opportunities. Explore our internal positions and join us in shaping a brighter future. Thank you for being a part of Fujitsu. We look forward to growing together toward a brighter future. UK Head of Quantum Reporting into the UK CTO as part of the UK Technology Group, the UK Head of Quantum will establish the UK Quantum function and ensure Fujitsu UK can translate Fujitsu's global quantum capability into market-relevant services, propositions and client outcomes. As the Head, you will be entrusted with building the UK quantum capability from inception, creating the team, governance, delivery approach and global integration model needed to position Fujitsu as a credible quantum leader in the UK market. Your responsibilities will include: 1. Strategic Leadership: Create and lead the UK Quantum function. Develop and execute a UK quantum strategy aligned to Fujitsu UK priorities, Fujitsu Uvance, the UK Technology Group and Fujitsu's global quantum strategy, with a clear value proposition for the UK market. 2. Operating Model Design: Define the UK quantum team operating model, including governance, roles and responsibilities, engagement routes with sectors, bid support, delivery standards, commercial models, assurance processes and integration points into global Fujitsu teams. 3. Global Integration: Act as the UK point of integration into Fujitsu's global quantum ecosystem, including Fujitsu Research Japan, Fujitsu Research Europe, global quantum consulting, artificial intelligence teams, quantum software, digital annealing, HPC and partner-led capabilities. 4. Team Creation & Capability Building: Build and develop a multidisciplinary UK team across quantum consulting, solution architecture, algorithms, quantum-inspired optimisation, HPC, AI integration, business development and delivery. Working with our FUSION lead, establish communities of practice and capability pathways to grow quantum literacy across Fujitsu UK. 5. Technology Focus & Solution Architecture: Working with the UK Chief Architect, shape architectures and customer solutions across quantum technologies, including superconducting qubits, diamond spin qubits, quantum application research packages, error correction, quantum simulation, Digital Annealer, Monaka/HPC, AI-enabled workflows and hybrid quantum-classical solution patterns. 6. Client Engagement & Advisory: Work closely with UK sectors and strategic customers to identify high-value quantum use cases, assess readiness, shape roadmaps and deliver advisory engagements that move clients from awareness and experimentation towards practical adoption. Translate complex physics into business language to bridge the gap in understanding and take both our customers and Fujitsu on the journey. 7. GTM Creation - Consultancy + Product: Working with Portfolio, Partner Team, Enablement, Sales and sector teams, create UK go-to-market propositions for quantum consulting, discovery workshops, proof-of-concept development, optimisation services, simulation, financial services propositions, quantum-HPC-AI integration and industry-specific accelerators. 8. Partner & Ecosystem Development: Working with our partnership team, build relationships with universities, research institutions, Hyperscalers, quantum hardware and software partners, government bodies, standards organisations and key ecosystem players to strengthen Fujitsu's UK market position. 9. Governance, Standards & Responsible Innovation: Working alongside our Centre of digital Enablement (CoDE), establish standards for quantum delivery, assurance, security, ethics, responsible innovation, IP management and compliance, ensuring alignment with Fujitsu global standards, UK policy direction and customer regulatory requirements. 10. Thought Leadership & Market Presence: Act as the UK quantum storyteller and market evangelist, creating compelling narratives, running internal and external events, supporting analyst and marketing activity, publishing points of view and representing Fujitsu at industry forums. Your experience Understanding of the quantum computing landscape, including current maturity, commercial opportunities, adoption barriers and likely industry disruption. Practical experience & knowledge of quantum computing, quantum-inspired optimisation, quantum simulation, hybrid quantum-classical architectures and the relationship between quantum, AI and HPC. Experience establishing a new technology function, centre of excellence or strategic capability within a complex organisation. Experience building, leading and developing multidisciplinary teams across architecture, consulting, engineering, research and business development. Experience defining an operating model, governance structure and delivery approach for an emerging technology capability. Ability to integrate local market needs with global portfolio, research and product strategies. Experience translating advanced technology into commercially compelling propositions, advisory services, proof-of-concepts and repeatable delivery patterns. Broad understanding of UK market demand across financial services, public sector, manufacturing, defence, transport, healthcare, energy and sustainability use cases. Significant experience in senior stakeholder management, including C-suite engagement, customer-facing consulting and internal executive alignment. Experience working with universities, research bodies, partner ecosystems, government programmes and technology alliances. Excellent communication skills, including external keynote speaking, storytelling, marketing support and the ability to explain complex technology to business audiences. High-level understanding of DX technologies, cloud, cybersecurity, data, AI, automation and modern software engineering. Good understanding of business principles, commercial models, pipeline creation and value-based selling. Key outcomes in the first 12 months Published UK quantum strategy, value proposition and three-year roadmap aligned to Fujitsu's global strategy and the UK Technology Group. Established UK quantum operating model, governance forum, engagement process and integration model with global Fujitsu teams. Built the core UK quantum team and launched an internal quantum community to increase awareness and capability across sectors and delivery teams. Created a market-facing portfolio of quantum consulting and proof-of-concept offerings, including quantum-inspired optimisation, simulation, AI integration and HPC-enabled propositions. Identified and progressed priority UK customer opportunities, with a repeatable approach to discovery, qualification, delivery and value measurement. Established strategic partner relationships across academia, research, technology providers and relevant UK ecosystem organisations. Achieve together We are recognised as a responsible and inclusive employer: Not only are we a certified Disability Confident Leader , a Times Top 50 employer for Gender Equality, a Top 75 employer for Social Mobility, accredited with the Living Wage Foundation and a signatory for the Race at Work Charter, but we are also committed to the United Nations standards for LGBTI+ and a Stonewall Top 100 Employer. We are people centric: Our work environments enable you to Be Completely You.Our active people-led Inclusive Community networks are representative of all aspects of diversity and are instrumental in enabling and supporting our innovative approach to inclusion. At Fujitsu, we are committed to an inclusive recruitment process that values the diverse backgrounds and experiences of all applicants. We believe that hiring people from a wide variety of backgrounds makes us stronger, not because it's the right thing to do, but because it allows us to draw on a wider range of perspectives and life experiences.
Music is Universal It's the passionate and dedicated team at Universal Music who help make us the world's leading music company. From A&R to finance, legal to digital, sales to marketing, Universal Music is the place to grow and develop your career within a truly commercial and innovative business that leads in everything it does.Everyone is welcome to apply for our roles, and we are determined to ensure that no applicant or employee receives less favourable treatment because of gender, race, disability, sexual orientation, religion, belief, age, marital status, background, pregnancy, or caring responsibilities. We also recognise the importance of diversity of thought within our teams and are fully committed to embracing the talents of people with autism, dyslexia, ADHD, and other forms of neurocognitive variation.We will always seek to make appropriate adjustments to recruitment, workplaces, and work processes to be fully inclusive to people with different needs and working styles. If you need us to make any reasonable adjustments for you from application onwards, including alternatives to the online form or to disclose a neurocognitive condition, please email . Job Summary We are currently seeking an Identity & Access Management Engineer with specialization in Access Management to join UMG's global Tech Security & Identity organization. Reporting to the Manager, Access ManagementVP, Tech Security & Identity, this is a hands-on engineering role responsible for designing, implementing, and operating enterprise access management capabilities across a global, hybrid environment - including workforce, partner, customer, and consumer experiences.This engineer will play a critical role in securing authentication and authorization for workforce and application access, delivering scalable solutions across Single Sign-On (SSO), federation, and multi-factor authentication (MFA). The role emphasizes strong technical execution, platform reliability, and automation, working closely with application, infrastructure, and security teams to enable secure access while maintaining a strong user experience. The ideal candidate brings deep experience with modern access management platforms and protocols, and the ability to operate access services at enterprise scale. Job Functions Design, engineer, deploy, and operate Access Management solutions across the enterprise. Implement and support Single Sign-On (SSO) and federation services using modern identity protocols. Engineer and maintain authentication and authorization services including MFA, adaptive access, and conditional access policies. Integrate applications and platforms with enterprise access management systems across on-premises and cloud environments. Partner with application owners and platform teams to onboard applications to SSO and enforce consistent authentication standards. Design and maintain secure federation integrations using protocols such as SAML, OAuth 2.0, and OpenID Connect (OIDC). Develop and maintain automation and tooling to support access onboarding, configuration, and lifecycle management. Troubleshoot and resolve complex authentication, authorization, and federation issues impacting users or applications. Ensure access management services meet availability, performance, and resiliency requirements in a global environment. Support audit, compliance, and security review activities related to access controls and authentication mechanisms. Maintain technical documentation, standards, and runbooks for access management platforms and integrations. Continuously improve access security and user experience through platform enhancements, automation, and adoption of modern authentication patterns. Job Requirements Essential Qualifications 5+ years of hands-on experience in Identity & Access Management or Security Engineering roles, with strong focus on Access Management. Demonstrated experience implementing and operating enterprise access management platforms (e.g., Ping Identity, Okta, Microsoft Entra ID, or equivalent). Strong understanding of authentication and authorization concepts, including SSO, federation, MFA, and adaptive access. Hands-on experience with identity protocols and standards such as SAML, OAuth 2.0, OpenID Connect (OIDC), and LDAP. Experience integrating identity platforms with cloud applications, SaaS platforms, and custom-built applications. Proficiency in scripting and automation using tools such as PowerShell or Python. Experience operating access services in hybrid and cloud environments (Azure and/or AWS). Ability to independently own complex technical implementations while collaborating across a global organization. Strong troubleshooting, documentation, and communication skills.Desirable Qualifications Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical discipline. Experience with passwordless authentication technologies and modern identity standards. Familiarity with Zero Trust and conditional access models. Experience supporting authentication services in high-availability, 24x7 enterprise environments. Experience with identity verification solutions and technolgies. Professional certifications such as Ping Identity Certified Professional, Microsoft Certified: Identity and Access Administrator, Security+, or CISSP. Experience operating IAM platforms within a large, global, or highly regulated enterprise environment. About UMG UK We are Universal Music Group UK - the UK's leading music-based entertainment company. We exist to shape culture through the power of artistry. We help UK artists produce, distribute and promote the most critically acclaimed and commercially successful music to inspire and entertain fans at home and around the world. Bonus Tracks: Your Benefits Group Personal Pension Scheme (between 3% and 9%) Private Medical Insurance 25 paid days of annual leave Interest Free Season Ticket Loan Holiday Purchase scheme Dental and Travel Insurance options Cycle to Work Scheme Salary Sacrifice Cars Subsidised Gym Membership Employee Discounts (Reward Gateway)Just So You Know The company presents this job description as a guide to the major areas and duties for which the jobholder is accountable. However, the business operates in an environment that demands change and the jobholder's specific responsibilities and activities will vary and develop. Therefore, the job description should be seen as indicative and not as a permanent, definitive, and exhaustive statement. Job Category: Universal Music Group
Aug 07, 2026
Full time
Music is Universal It's the passionate and dedicated team at Universal Music who help make us the world's leading music company. From A&R to finance, legal to digital, sales to marketing, Universal Music is the place to grow and develop your career within a truly commercial and innovative business that leads in everything it does.Everyone is welcome to apply for our roles, and we are determined to ensure that no applicant or employee receives less favourable treatment because of gender, race, disability, sexual orientation, religion, belief, age, marital status, background, pregnancy, or caring responsibilities. We also recognise the importance of diversity of thought within our teams and are fully committed to embracing the talents of people with autism, dyslexia, ADHD, and other forms of neurocognitive variation.We will always seek to make appropriate adjustments to recruitment, workplaces, and work processes to be fully inclusive to people with different needs and working styles. If you need us to make any reasonable adjustments for you from application onwards, including alternatives to the online form or to disclose a neurocognitive condition, please email . Job Summary We are currently seeking an Identity & Access Management Engineer with specialization in Access Management to join UMG's global Tech Security & Identity organization. Reporting to the Manager, Access ManagementVP, Tech Security & Identity, this is a hands-on engineering role responsible for designing, implementing, and operating enterprise access management capabilities across a global, hybrid environment - including workforce, partner, customer, and consumer experiences.This engineer will play a critical role in securing authentication and authorization for workforce and application access, delivering scalable solutions across Single Sign-On (SSO), federation, and multi-factor authentication (MFA). The role emphasizes strong technical execution, platform reliability, and automation, working closely with application, infrastructure, and security teams to enable secure access while maintaining a strong user experience. The ideal candidate brings deep experience with modern access management platforms and protocols, and the ability to operate access services at enterprise scale. Job Functions Design, engineer, deploy, and operate Access Management solutions across the enterprise. Implement and support Single Sign-On (SSO) and federation services using modern identity protocols. Engineer and maintain authentication and authorization services including MFA, adaptive access, and conditional access policies. Integrate applications and platforms with enterprise access management systems across on-premises and cloud environments. Partner with application owners and platform teams to onboard applications to SSO and enforce consistent authentication standards. Design and maintain secure federation integrations using protocols such as SAML, OAuth 2.0, and OpenID Connect (OIDC). Develop and maintain automation and tooling to support access onboarding, configuration, and lifecycle management. Troubleshoot and resolve complex authentication, authorization, and federation issues impacting users or applications. Ensure access management services meet availability, performance, and resiliency requirements in a global environment. Support audit, compliance, and security review activities related to access controls and authentication mechanisms. Maintain technical documentation, standards, and runbooks for access management platforms and integrations. Continuously improve access security and user experience through platform enhancements, automation, and adoption of modern authentication patterns. Job Requirements Essential Qualifications 5+ years of hands-on experience in Identity & Access Management or Security Engineering roles, with strong focus on Access Management. Demonstrated experience implementing and operating enterprise access management platforms (e.g., Ping Identity, Okta, Microsoft Entra ID, or equivalent). Strong understanding of authentication and authorization concepts, including SSO, federation, MFA, and adaptive access. Hands-on experience with identity protocols and standards such as SAML, OAuth 2.0, OpenID Connect (OIDC), and LDAP. Experience integrating identity platforms with cloud applications, SaaS platforms, and custom-built applications. Proficiency in scripting and automation using tools such as PowerShell or Python. Experience operating access services in hybrid and cloud environments (Azure and/or AWS). Ability to independently own complex technical implementations while collaborating across a global organization. Strong troubleshooting, documentation, and communication skills.Desirable Qualifications Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical discipline. Experience with passwordless authentication technologies and modern identity standards. Familiarity with Zero Trust and conditional access models. Experience supporting authentication services in high-availability, 24x7 enterprise environments. Experience with identity verification solutions and technolgies. Professional certifications such as Ping Identity Certified Professional, Microsoft Certified: Identity and Access Administrator, Security+, or CISSP. Experience operating IAM platforms within a large, global, or highly regulated enterprise environment. About UMG UK We are Universal Music Group UK - the UK's leading music-based entertainment company. We exist to shape culture through the power of artistry. We help UK artists produce, distribute and promote the most critically acclaimed and commercially successful music to inspire and entertain fans at home and around the world. Bonus Tracks: Your Benefits Group Personal Pension Scheme (between 3% and 9%) Private Medical Insurance 25 paid days of annual leave Interest Free Season Ticket Loan Holiday Purchase scheme Dental and Travel Insurance options Cycle to Work Scheme Salary Sacrifice Cars Subsidised Gym Membership Employee Discounts (Reward Gateway)Just So You Know The company presents this job description as a guide to the major areas and duties for which the jobholder is accountable. However, the business operates in an environment that demands change and the jobholder's specific responsibilities and activities will vary and develop. Therefore, the job description should be seen as indicative and not as a permanent, definitive, and exhaustive statement. Job Category: Universal Music Group
Cloud Systems Engineer Manchester/Stockport (Hybrid - 3 days onsite) (Apply online only) per day Inside IR35 Contract length TBC (Likely 12 months+) PCR Digital are delighted to be partnering with an exciting FinTech company who are a global leader in payment technology, on the appointment of a Cloud Systems Engineer II to join their growing cloud infrastructure team based in Manchester. This is an excellent opportunity for an experienced Cloud Infrastructure or Platform Engineer looking to work across both Google Cloud Platform (GCP) and AWS , helping to design, automate and optimise highly available cloud environments that underpin mission-critical financial services platforms used by businesses around the world. You'll be joining an established engineering function where automation, Infrastructure as Code and modern DevOps practices are central to how technology is delivered. The Opportunity You'll take ownership of designing, building and supporting cloud infrastructure whilst working closely with software engineering and platform teams to improve scalability, security and operational excellence. This role offers plenty of variety, covering infrastructure design, automation, cloud networking, security, reliability and continuous improvement across a modern multi-cloud estate. Key Responsibilities Design, build and maintain scalable cloud infrastructure across GCP and AWS Develop Infrastructure as Code using Terraform Create and maintain Ansible playbooks for automation and configuration management Build resilient, secure and highly available cloud environments Work closely with development teams to support application deployments Improve automation, monitoring and operational efficiency Optimise cloud performance and spend across multiple environments Support incident response, troubleshooting and root cause analysis Implement networking, security and disaster recovery best practices Produce clear technical documentation and infrastructure standards We're looking for experience in: Commercial experience as a Cloud Engineer, Systems Engineer, Platform Engineer or Infrastructure Engineer Strong hands-on experience with Google Cloud Platform (GCP) Good commercial experience with AWS Terraform (essential) Ansible automation Linux administration Docker and Kubernetes Bash and/or Python scripting Cloud networking (VPCs, IAM, Load Balancers, routing) Infrastructure automation and CI/CD Strong understanding of cloud security and best practices Highly desirable Any experience with the following would be advantageous: GKE and/or Amazon EKS Prometheus, Grafana or CloudWatch GitOps (ArgoCD / Flux) Service Mesh technologies PCI DSS or regulated financial environments FinOps or cloud cost optimisation ELK Stack or centralised logging Disaster Recovery and Business Continuity planning Professional AWS or GCP certifications Why apply? Join one of the world's leading payment technology organisations Work with modern cloud technologies across both AWS and GCP Highly collaborative engineering culture Long-term programme with strong extension potential Hybrid working from the Manchester office If you're an experienced Cloud Systems Engineer , Platform Engineer , Cloud Infrastructure Engineer or DevOps Engineer with strong Terraform, GCP and AWS experience, we'd love to hear from you. Please apply with your latest CV and one of the PCR Digital team will be in touch to discuss the opportunity in more detail.
Jul 31, 2026
Contractor
Cloud Systems Engineer Manchester/Stockport (Hybrid - 3 days onsite) (Apply online only) per day Inside IR35 Contract length TBC (Likely 12 months+) PCR Digital are delighted to be partnering with an exciting FinTech company who are a global leader in payment technology, on the appointment of a Cloud Systems Engineer II to join their growing cloud infrastructure team based in Manchester. This is an excellent opportunity for an experienced Cloud Infrastructure or Platform Engineer looking to work across both Google Cloud Platform (GCP) and AWS , helping to design, automate and optimise highly available cloud environments that underpin mission-critical financial services platforms used by businesses around the world. You'll be joining an established engineering function where automation, Infrastructure as Code and modern DevOps practices are central to how technology is delivered. The Opportunity You'll take ownership of designing, building and supporting cloud infrastructure whilst working closely with software engineering and platform teams to improve scalability, security and operational excellence. This role offers plenty of variety, covering infrastructure design, automation, cloud networking, security, reliability and continuous improvement across a modern multi-cloud estate. Key Responsibilities Design, build and maintain scalable cloud infrastructure across GCP and AWS Develop Infrastructure as Code using Terraform Create and maintain Ansible playbooks for automation and configuration management Build resilient, secure and highly available cloud environments Work closely with development teams to support application deployments Improve automation, monitoring and operational efficiency Optimise cloud performance and spend across multiple environments Support incident response, troubleshooting and root cause analysis Implement networking, security and disaster recovery best practices Produce clear technical documentation and infrastructure standards We're looking for experience in: Commercial experience as a Cloud Engineer, Systems Engineer, Platform Engineer or Infrastructure Engineer Strong hands-on experience with Google Cloud Platform (GCP) Good commercial experience with AWS Terraform (essential) Ansible automation Linux administration Docker and Kubernetes Bash and/or Python scripting Cloud networking (VPCs, IAM, Load Balancers, routing) Infrastructure automation and CI/CD Strong understanding of cloud security and best practices Highly desirable Any experience with the following would be advantageous: GKE and/or Amazon EKS Prometheus, Grafana or CloudWatch GitOps (ArgoCD / Flux) Service Mesh technologies PCI DSS or regulated financial environments FinOps or cloud cost optimisation ELK Stack or centralised logging Disaster Recovery and Business Continuity planning Professional AWS or GCP certifications Why apply? Join one of the world's leading payment technology organisations Work with modern cloud technologies across both AWS and GCP Highly collaborative engineering culture Long-term programme with strong extension potential Hybrid working from the Manchester office If you're an experienced Cloud Systems Engineer , Platform Engineer , Cloud Infrastructure Engineer or DevOps Engineer with strong Terraform, GCP and AWS experience, we'd love to hear from you. Please apply with your latest CV and one of the PCR Digital team will be in touch to discuss the opportunity in more detail.
About Moove At Moove AV, we're on a mission to make the world safer by enabling autonomy in transportation. Partnering with industry leaders like Waymo, we're redefining fleet management and driving the commercialisation of autonomous vehicles. We're expanding globally and seeking passionate, innovative professionals to join our journey. If you're ready to be at the forefront of cutting edge technology and help make mobility safer, more efficient, and accessible, we want to hear from you! About the Role We are seeking an accomplished and highly strategic Head of Public & Government Affairs to lead our policy, regulatory, and government engagement strategy across Europe and Asia, with a primary focus on the rapidly evolving autonomous vehicle (AV) and advanced transportation sectors. This senior leader will guide the company's long range policy positioning, advocate for modernised mobility frameworks, and influence key regulatory pathways that enable safe and scalable AV deployment. As a senior representative of the company, you will work closely with executive leadership, serve as a trusted advisor on geopolitical and regulatory risk, and shape high impact advocacy strategies across diverse markets. You will drive meaningful dialogue with government officials, regulators, industry coalitions, and global institutions-helping secure the policy conditions needed to support current and future AV operations. This role can be based in the European Union or United Kingdom and will involve regular international travel. Key Responsibilities Strategic Policy Leadership Lead the development and execution of the company's government affairs strategy across Europe and Asia, with specific focus on regulatory pathways for autonomous vehicle testing, safety approvals, commercial deployment, and mobility policy. Provide executive level insights on policy trends, regulatory risks, geopolitical considerations, and long term implications for business expansion. Align policy strategy with corporate, operational, and product roadmaps, ensuring a unified approach to global AV regulatory compliance. Executive Government Engagement Serve as the company's senior representative with high level government officials, transport ministries, EU institutions, intergovernmental bodies (e.g., UNECE), and Asian regulatory authorities. Build trusted, strategic relationships at the highest levels of government to support regulatory approvals, pilot programmes, market entry, and commercial scale operations. Lead or oversee participation in ministerial roundtables, parliamentary briefings, and regulatory consultations. Advocacy & Lobbying Leadership Shape and drive regulatory advocacy initiatives that support harmonised AV policies, safety standards, and data frameworks across regions. Develop senior level policy materials including position papers, testimony, executive briefing documents, and cross jurisdiction policy strategies. Influence the direction of AV relevant legislation on safety, infrastructure, data governance, cybersecurity, and digital mobility ecosystems. Industry & Ecosystem Leadership Represent the company in high profile industry forums, trade associations, global mobility alliances, and standards setting organisations. Establish the company as a thought leader in autonomous mobility, safety innovation, and next generation transportation policy. Drive collaboration with research partners, academia, NGOs, and industry coalitions to advance shared policy goals. Internal Leadership & Cross Functional Alignment Lead internal governance for policy escalation, ensuring transparent and structured alignment with Legal, Operations, Product, Engineering, Safety, and Communications teams. Advise Senior Leadership and the CEO on market readiness, regulatory barriers, and strategic engagement opportunities. Support the Communications team in shaping the external narrative around AV safety, innovation, and regulatory collaboration. Market Intelligence & Risk Management Oversee monitoring of regulatory changes, geopolitics, and public sentiment across key markets. Conduct strategic risk assessments and scenario planning related to AV deployment and future market expansion. Provide guidance on compliance obligations across all operating jurisdictions. Qualifications & Experience 10-15+ years of senior experience in government affairs, public policy, regulatory strategy, or external affairs-preferably in transportation, mobility, technology, or highly regulated sectors. Deep expertise in European transportation and mobility regulation (e.g., EU mobility packages, UNECE vehicle regulations, General Safety Regulation, cybersecurity and data frameworks). Strong familiarity with Asian regulatory environments (e.g., Singapore LTA, Japan MLIT, UAE, or other regional AV leaders). Proven track record influencing complex regulatory landscapes and securing policy outcomes that support emerging technologies. Experience working directly with senior level government officials, transport regulators, and industry standard bodies. Outstanding written advocacy skills, public speaking ability, and executive presence. Strong ability to navigate ambiguity, manage multi country policy strategies, and lead through influence. Willingness to travel internationally 30-40%. About the team Our team is collaborative, positive, curious, and engaged. We think fast, work smart, laugh often, and are looking for like minded people to join us in our mission to disrupt vehicle ownership and make financial freedom within reach. Moove is strongly committed to diversity within its community. The Company's approved Employment Equity Plan and Targets will be considered as part of the recruitment process. As an Equal Opportunities employer, we welcome people from all backgrounds who seek the opportunity to help build a future where everyone and everything can move independently. Pre hiring Notice: Moove relies on the accuracy of information contained in employment applications, as well as the accuracy of other data presented throughout the hiring process and during employment. Any misrepresentations, falsifications, or material omissions in any information or data provided by an applicant may result in the applicant being excluded from further consideration for employment or, if an applicant has already been hired, termination of employment. EEO Statement: Moove is an equal opportunity employer and does not discriminate on the basis of gender, race, sexual orientation, marital status, religion, political affiliation or any other protected characteristic.
May 30, 2026
Full time
About Moove At Moove AV, we're on a mission to make the world safer by enabling autonomy in transportation. Partnering with industry leaders like Waymo, we're redefining fleet management and driving the commercialisation of autonomous vehicles. We're expanding globally and seeking passionate, innovative professionals to join our journey. If you're ready to be at the forefront of cutting edge technology and help make mobility safer, more efficient, and accessible, we want to hear from you! About the Role We are seeking an accomplished and highly strategic Head of Public & Government Affairs to lead our policy, regulatory, and government engagement strategy across Europe and Asia, with a primary focus on the rapidly evolving autonomous vehicle (AV) and advanced transportation sectors. This senior leader will guide the company's long range policy positioning, advocate for modernised mobility frameworks, and influence key regulatory pathways that enable safe and scalable AV deployment. As a senior representative of the company, you will work closely with executive leadership, serve as a trusted advisor on geopolitical and regulatory risk, and shape high impact advocacy strategies across diverse markets. You will drive meaningful dialogue with government officials, regulators, industry coalitions, and global institutions-helping secure the policy conditions needed to support current and future AV operations. This role can be based in the European Union or United Kingdom and will involve regular international travel. Key Responsibilities Strategic Policy Leadership Lead the development and execution of the company's government affairs strategy across Europe and Asia, with specific focus on regulatory pathways for autonomous vehicle testing, safety approvals, commercial deployment, and mobility policy. Provide executive level insights on policy trends, regulatory risks, geopolitical considerations, and long term implications for business expansion. Align policy strategy with corporate, operational, and product roadmaps, ensuring a unified approach to global AV regulatory compliance. Executive Government Engagement Serve as the company's senior representative with high level government officials, transport ministries, EU institutions, intergovernmental bodies (e.g., UNECE), and Asian regulatory authorities. Build trusted, strategic relationships at the highest levels of government to support regulatory approvals, pilot programmes, market entry, and commercial scale operations. Lead or oversee participation in ministerial roundtables, parliamentary briefings, and regulatory consultations. Advocacy & Lobbying Leadership Shape and drive regulatory advocacy initiatives that support harmonised AV policies, safety standards, and data frameworks across regions. Develop senior level policy materials including position papers, testimony, executive briefing documents, and cross jurisdiction policy strategies. Influence the direction of AV relevant legislation on safety, infrastructure, data governance, cybersecurity, and digital mobility ecosystems. Industry & Ecosystem Leadership Represent the company in high profile industry forums, trade associations, global mobility alliances, and standards setting organisations. Establish the company as a thought leader in autonomous mobility, safety innovation, and next generation transportation policy. Drive collaboration with research partners, academia, NGOs, and industry coalitions to advance shared policy goals. Internal Leadership & Cross Functional Alignment Lead internal governance for policy escalation, ensuring transparent and structured alignment with Legal, Operations, Product, Engineering, Safety, and Communications teams. Advise Senior Leadership and the CEO on market readiness, regulatory barriers, and strategic engagement opportunities. Support the Communications team in shaping the external narrative around AV safety, innovation, and regulatory collaboration. Market Intelligence & Risk Management Oversee monitoring of regulatory changes, geopolitics, and public sentiment across key markets. Conduct strategic risk assessments and scenario planning related to AV deployment and future market expansion. Provide guidance on compliance obligations across all operating jurisdictions. Qualifications & Experience 10-15+ years of senior experience in government affairs, public policy, regulatory strategy, or external affairs-preferably in transportation, mobility, technology, or highly regulated sectors. Deep expertise in European transportation and mobility regulation (e.g., EU mobility packages, UNECE vehicle regulations, General Safety Regulation, cybersecurity and data frameworks). Strong familiarity with Asian regulatory environments (e.g., Singapore LTA, Japan MLIT, UAE, or other regional AV leaders). Proven track record influencing complex regulatory landscapes and securing policy outcomes that support emerging technologies. Experience working directly with senior level government officials, transport regulators, and industry standard bodies. Outstanding written advocacy skills, public speaking ability, and executive presence. Strong ability to navigate ambiguity, manage multi country policy strategies, and lead through influence. Willingness to travel internationally 30-40%. About the team Our team is collaborative, positive, curious, and engaged. We think fast, work smart, laugh often, and are looking for like minded people to join us in our mission to disrupt vehicle ownership and make financial freedom within reach. Moove is strongly committed to diversity within its community. The Company's approved Employment Equity Plan and Targets will be considered as part of the recruitment process. As an Equal Opportunities employer, we welcome people from all backgrounds who seek the opportunity to help build a future where everyone and everything can move independently. Pre hiring Notice: Moove relies on the accuracy of information contained in employment applications, as well as the accuracy of other data presented throughout the hiring process and during employment. Any misrepresentations, falsifications, or material omissions in any information or data provided by an applicant may result in the applicant being excluded from further consideration for employment or, if an applicant has already been hired, termination of employment. EEO Statement: Moove is an equal opportunity employer and does not discriminate on the basis of gender, race, sexual orientation, marital status, religion, political affiliation or any other protected characteristic.
IAM AnalystApplylocations: Kings Cross, Londontime type: Full timeposted on: Posted 8 Days Agojob requisition id: UMG-23757Music is Universal It's the passionate and dedicated team at Universal Music who help make us the world's leading music company. From A&R to finance, legal to digital, sales to marketing, Universal Music is the place to grow and develop your career within a truly commercial and innovative business that leads in everything it does.Everyone is welcome to apply for our roles, and we are determined to ensure that no applicant or employee receives less favourable treatment because of gender, race, disability, sexual orientation, religion, belief, age, marital status, background, pregnancy, or caring responsibilities. We also recognise the importance of diversity of thought within our teams and are fully committed to embracing the talents of people with autism, dyslexia, ADHD, and other forms of neurocognitive variation.We will always seek to make appropriate adjustments to recruitment, workplaces, and work processes to be fully inclusive to people with different needs and working styles. If you need us to make any reasonable adjustments for you from application onwards, including alternatives to the online form or to disclose a neurocognitive condition, please email . Job Summary: We are UMG, the Universal Music Group. We are the world's leading music company. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.We are currently seeking an IAM Analyst to join our Global Tech Security team. The ideal candidate will have exposure across the Identity & Access Management (IAM) stack. Primary focus will be on providing data analysis and reporting on enterprise-grade solutions across Privileged Access Management (PAM), Identity Governance and Administration (IGA), Public Key Infrastructure (PKI), Directory Services, Federation, and more. This role requires a combination of strong communication and critical thinking skills with strong attention to detail. Job Functions: Research and provide data analyst for IAM tools across the enterprise including CyberArk, Ping DaVinci, Microsoft EntraID (formerly Azure AD), HashiCorp Vault, Digicert, and Saviynt. Support the implementation and enhancement of IAM services including: - SSO/Federation (SAML, OIDC, WS-Fed) - MFA/Passwordless - Privileged Access Management (PAM) - Identity Governance (IGA) - PKI and certificate lifecycle automation - Directory services (AD, EntraID). Track automation scripts and integrations for IAM workflows using tools such as PowerShell, Python, or Terraform. Communicate design and implement access controls and policies that align with security and compliance standards (SOX, GDPR, etc.). Evaluate AI-powered tools and methodologies to improve identity lifecycle efficiency, risk detection, and operational decision-making. Participate in lifecycle management processes for accounts, credentials, roles, and policies across systems and applications. Collaborate with InfoSec, Infrastructure, and App teams to ensure secure identity architecture for on-prem and cloud environments. Maintain high-quality documentation and architectural diagrams. Monitor and report metrics on IAM system performance, adoption, and audit readiness. Job Requirements: Essential Qualifications 2+ years of experience in IAM engineering teams. Some proficiency of technical expertise in one or more of the following: CyberArk, Ping Identity, Microsoft EntraID, Saviynt, HashiCorp Vault, Digicert, Onfido. Understanding of IAM protocols and standards: SAML, OIDC, OAuth2, LDAP, Kerberos, SCIM, JIT. Familiarity with cloud platforms (Azure, AWS, GCP) and IAM integrations. Proven ability to work independently and cross-functionally in a global team. Strong troubleshooting, documentation, and communication skills. Strong communication skills for both technical details and business acumen.Desirable Bachelor's Degree in Computer Science, Engineering, or a related technical field. Professional certifications such as: CISSP, Security+, Microsoft Certified: Identity and Access Administrator, CyberArk Defender, Ping Identity Certified Professional. Experience with AI/ML integration into IAM workflows or security analytics. Experience supporting IAM functions in media or entertainment industry environments. Experience working on a global team covering multiple time zones.Just So You Know The company presents this job description as a guide to the major areas and duties for which the jobholder is accountable. However, the business operates in an environment that demands change and the jobholder's specific responsibilities and activities will vary and develop. Therefore, the job description should be seen as indicative and not as a permanent, definitive, and exhaustive statement.
May 29, 2026
Full time
IAM AnalystApplylocations: Kings Cross, Londontime type: Full timeposted on: Posted 8 Days Agojob requisition id: UMG-23757Music is Universal It's the passionate and dedicated team at Universal Music who help make us the world's leading music company. From A&R to finance, legal to digital, sales to marketing, Universal Music is the place to grow and develop your career within a truly commercial and innovative business that leads in everything it does.Everyone is welcome to apply for our roles, and we are determined to ensure that no applicant or employee receives less favourable treatment because of gender, race, disability, sexual orientation, religion, belief, age, marital status, background, pregnancy, or caring responsibilities. We also recognise the importance of diversity of thought within our teams and are fully committed to embracing the talents of people with autism, dyslexia, ADHD, and other forms of neurocognitive variation.We will always seek to make appropriate adjustments to recruitment, workplaces, and work processes to be fully inclusive to people with different needs and working styles. If you need us to make any reasonable adjustments for you from application onwards, including alternatives to the online form or to disclose a neurocognitive condition, please email . Job Summary: We are UMG, the Universal Music Group. We are the world's leading music company. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.We are currently seeking an IAM Analyst to join our Global Tech Security team. The ideal candidate will have exposure across the Identity & Access Management (IAM) stack. Primary focus will be on providing data analysis and reporting on enterprise-grade solutions across Privileged Access Management (PAM), Identity Governance and Administration (IGA), Public Key Infrastructure (PKI), Directory Services, Federation, and more. This role requires a combination of strong communication and critical thinking skills with strong attention to detail. Job Functions: Research and provide data analyst for IAM tools across the enterprise including CyberArk, Ping DaVinci, Microsoft EntraID (formerly Azure AD), HashiCorp Vault, Digicert, and Saviynt. Support the implementation and enhancement of IAM services including: - SSO/Federation (SAML, OIDC, WS-Fed) - MFA/Passwordless - Privileged Access Management (PAM) - Identity Governance (IGA) - PKI and certificate lifecycle automation - Directory services (AD, EntraID). Track automation scripts and integrations for IAM workflows using tools such as PowerShell, Python, or Terraform. Communicate design and implement access controls and policies that align with security and compliance standards (SOX, GDPR, etc.). Evaluate AI-powered tools and methodologies to improve identity lifecycle efficiency, risk detection, and operational decision-making. Participate in lifecycle management processes for accounts, credentials, roles, and policies across systems and applications. Collaborate with InfoSec, Infrastructure, and App teams to ensure secure identity architecture for on-prem and cloud environments. Maintain high-quality documentation and architectural diagrams. Monitor and report metrics on IAM system performance, adoption, and audit readiness. Job Requirements: Essential Qualifications 2+ years of experience in IAM engineering teams. Some proficiency of technical expertise in one or more of the following: CyberArk, Ping Identity, Microsoft EntraID, Saviynt, HashiCorp Vault, Digicert, Onfido. Understanding of IAM protocols and standards: SAML, OIDC, OAuth2, LDAP, Kerberos, SCIM, JIT. Familiarity with cloud platforms (Azure, AWS, GCP) and IAM integrations. Proven ability to work independently and cross-functionally in a global team. Strong troubleshooting, documentation, and communication skills. Strong communication skills for both technical details and business acumen.Desirable Bachelor's Degree in Computer Science, Engineering, or a related technical field. Professional certifications such as: CISSP, Security+, Microsoft Certified: Identity and Access Administrator, CyberArk Defender, Ping Identity Certified Professional. Experience with AI/ML integration into IAM workflows or security analytics. Experience supporting IAM functions in media or entertainment industry environments. Experience working on a global team covering multiple time zones.Just So You Know The company presents this job description as a guide to the major areas and duties for which the jobholder is accountable. However, the business operates in an environment that demands change and the jobholder's specific responsibilities and activities will vary and develop. Therefore, the job description should be seen as indicative and not as a permanent, definitive, and exhaustive statement.
IAM AnalystApplylocations: Kings Cross, Londontime type: Full timeposted on: Posted 8 Days Agojob requisition id: UMG-23757Music is Universal It's the passionate and dedicated team at Universal Music who help make us the world's leading music company. From A&R to finance, legal to digital, sales to marketing, Universal Music is the place to grow and develop your career within a truly commercial and innovative business that leads in everything it does.Everyone is welcome to apply for our roles, and we are determined to ensure that no applicant or employee receives less favourable treatment because of gender, race, disability, sexual orientation, religion, belief, age, marital status, background, pregnancy, or caring responsibilities. We also recognise the importance of diversity of thought within our teams and are fully committed to embracing the talents of people with autism, dyslexia, ADHD, and other forms of neurocognitive variation.We will always seek to make appropriate adjustments to recruitment, workplaces, and work processes to be fully inclusive to people with different needs and working styles. If you need us to make any reasonable adjustments for you from application onwards, including alternatives to the online form or to disclose a neurocognitive condition, please email . Job Summary: We are UMG, the Universal Music Group. We are the world's leading music company. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.We are currently seeking an IAM Analyst to join our Global Tech Security team. The ideal candidate will have exposure across the Identity & Access Management (IAM) stack. Primary focus will be on providing data analysis and reporting on enterprise-grade solutions across Privileged Access Management (PAM), Identity Governance and Administration (IGA), Public Key Infrastructure (PKI), Directory Services, Federation, and more. This role requires a combination of strong communication and critical thinking skills with strong attention to detail. Job Functions: Research and provide data analyst for IAM tools across the enterprise including CyberArk, Ping DaVinci, Microsoft EntraID (formerly Azure AD), HashiCorp Vault, Digicert, and Saviynt. Support the implementation and enhancement of IAM services including: - SSO/Federation (SAML, OIDC, WS-Fed) - MFA/Passwordless - Privileged Access Management (PAM) - Identity Governance (IGA) - PKI and certificate lifecycle automation - Directory services (AD, EntraID). Track automation scripts and integrations for IAM workflows using tools such as PowerShell, Python, or Terraform. Communicate design and implement access controls and policies that align with security and compliance standards (SOX, GDPR, etc.). Evaluate AI-powered tools and methodologies to improve identity lifecycle efficiency, risk detection, and operational decision-making. Participate in lifecycle management processes for accounts, credentials, roles, and policies across systems and applications. Collaborate with InfoSec, Infrastructure, and App teams to ensure secure identity architecture for on-prem and cloud environments. Maintain high-quality documentation and architectural diagrams. Monitor and report metrics on IAM system performance, adoption, and audit readiness. Job Requirements: Essential Qualifications 2+ years of experience in IAM engineering teams. Some proficiency of technical expertise in one or more of the following: CyberArk, Ping Identity, Microsoft EntraID, Saviynt, HashiCorp Vault, Digicert, Onfido. Understanding of IAM protocols and standards: SAML, OIDC, OAuth2, LDAP, Kerberos, SCIM, JIT. Familiarity with cloud platforms (Azure, AWS, GCP) and IAM integrations. Proven ability to work independently and cross-functionally in a global team. Strong troubleshooting, documentation, and communication skills. Strong communication skills for both technical details and business acumen.Desirable Bachelor's Degree in Computer Science, Engineering, or a related technical field. Professional certifications such as: CISSP, Security+, Microsoft Certified: Identity and Access Administrator, CyberArk Defender, Ping Identity Certified Professional. Experience with AI/ML integration into IAM workflows or security analytics. Experience supporting IAM functions in media or entertainment industry environments. Experience working on a global team covering multiple time zones.Just So You Know The company presents this job description as a guide to the major areas and duties for which the jobholder is accountable. However, the business operates in an environment that demands change and the jobholder's specific responsibilities and activities will vary and develop. Therefore, the job description should be seen as indicative and not as a permanent, definitive, and exhaustive statement.
May 29, 2026
Full time
IAM AnalystApplylocations: Kings Cross, Londontime type: Full timeposted on: Posted 8 Days Agojob requisition id: UMG-23757Music is Universal It's the passionate and dedicated team at Universal Music who help make us the world's leading music company. From A&R to finance, legal to digital, sales to marketing, Universal Music is the place to grow and develop your career within a truly commercial and innovative business that leads in everything it does.Everyone is welcome to apply for our roles, and we are determined to ensure that no applicant or employee receives less favourable treatment because of gender, race, disability, sexual orientation, religion, belief, age, marital status, background, pregnancy, or caring responsibilities. We also recognise the importance of diversity of thought within our teams and are fully committed to embracing the talents of people with autism, dyslexia, ADHD, and other forms of neurocognitive variation.We will always seek to make appropriate adjustments to recruitment, workplaces, and work processes to be fully inclusive to people with different needs and working styles. If you need us to make any reasonable adjustments for you from application onwards, including alternatives to the online form or to disclose a neurocognitive condition, please email . Job Summary: We are UMG, the Universal Music Group. We are the world's leading music company. In everything we do, we are committed to artistry, innovation and entrepreneurship. We own and operate a broad array of businesses engaged in recorded music, music publishing, merchandising, and audiovisual content in more than 60 countries. We identify and develop recording artists and songwriters, and we produce, distribute and promote the most critically acclaimed and commercially successful music to delight and entertain fans around the world.We are currently seeking an IAM Analyst to join our Global Tech Security team. The ideal candidate will have exposure across the Identity & Access Management (IAM) stack. Primary focus will be on providing data analysis and reporting on enterprise-grade solutions across Privileged Access Management (PAM), Identity Governance and Administration (IGA), Public Key Infrastructure (PKI), Directory Services, Federation, and more. This role requires a combination of strong communication and critical thinking skills with strong attention to detail. Job Functions: Research and provide data analyst for IAM tools across the enterprise including CyberArk, Ping DaVinci, Microsoft EntraID (formerly Azure AD), HashiCorp Vault, Digicert, and Saviynt. Support the implementation and enhancement of IAM services including: - SSO/Federation (SAML, OIDC, WS-Fed) - MFA/Passwordless - Privileged Access Management (PAM) - Identity Governance (IGA) - PKI and certificate lifecycle automation - Directory services (AD, EntraID). Track automation scripts and integrations for IAM workflows using tools such as PowerShell, Python, or Terraform. Communicate design and implement access controls and policies that align with security and compliance standards (SOX, GDPR, etc.). Evaluate AI-powered tools and methodologies to improve identity lifecycle efficiency, risk detection, and operational decision-making. Participate in lifecycle management processes for accounts, credentials, roles, and policies across systems and applications. Collaborate with InfoSec, Infrastructure, and App teams to ensure secure identity architecture for on-prem and cloud environments. Maintain high-quality documentation and architectural diagrams. Monitor and report metrics on IAM system performance, adoption, and audit readiness. Job Requirements: Essential Qualifications 2+ years of experience in IAM engineering teams. Some proficiency of technical expertise in one or more of the following: CyberArk, Ping Identity, Microsoft EntraID, Saviynt, HashiCorp Vault, Digicert, Onfido. Understanding of IAM protocols and standards: SAML, OIDC, OAuth2, LDAP, Kerberos, SCIM, JIT. Familiarity with cloud platforms (Azure, AWS, GCP) and IAM integrations. Proven ability to work independently and cross-functionally in a global team. Strong troubleshooting, documentation, and communication skills. Strong communication skills for both technical details and business acumen.Desirable Bachelor's Degree in Computer Science, Engineering, or a related technical field. Professional certifications such as: CISSP, Security+, Microsoft Certified: Identity and Access Administrator, CyberArk Defender, Ping Identity Certified Professional. Experience with AI/ML integration into IAM workflows or security analytics. Experience supporting IAM functions in media or entertainment industry environments. Experience working on a global team covering multiple time zones.Just So You Know The company presents this job description as a guide to the major areas and duties for which the jobholder is accountable. However, the business operates in an environment that demands change and the jobholder's specific responsibilities and activities will vary and develop. Therefore, the job description should be seen as indicative and not as a permanent, definitive, and exhaustive statement.
About the job Job summary We are looking for an enthusiastic Lead Infrastructure Engineer (Platform/DevOps) with great leadership and technical skills and a drive to improve. This role is a unique opportunity as you will be part of a team delivering Platform Infrastructure and systems to the highest standards and implementing the DevOps culture and principles across the business. Give yourself the best opportunity to apply! No need to register: just click on the link above to join, listen, and gain tips to help you apply. Cameras and microphones will be switched off. Can't make the session, or want something to refer back to? Just email our Outreach mailbox on: and we'll share a copy of the session slides. Companies House offers a flexible and welcoming culture that promotes a healthy work life balance as well as a proactive approach to wellbeing that allows us to be our best at work. We recognise that people are the key to our success so offer a fantastic benefits package including flexible working with no core hours, 30 days annual leave, 8 bank holidays and 1 privilege day as well as enrolment into the Civil Service Pension scheme with a contribution rate averaging 28%. Please note: Companies House cannot offer Visa sponsorship to candidates through this campaign. Security Clearance is an essential requirement for this campaign. You'll need to have been in the UK for at least 3 out of the last 5 years to be eligible to apply for SC. The team for this role is based in our Cardiff office, and a hybrid employment contract will be provided as the standard offering. However, remote contracts may be considered as an exception whereby commuting to the office location of your team is not reasonably practicable. We're able to consider full-time, part-time and compressed hours for this role for the successful candidate (part-time and compressed options would be a minimum of 30 hours over 4 or 5 days). Job description The position will be focussed on building and maintaining Infrastructure to enable the organisation to deliver rapidly and reliably deploy and innovate for our customers. A Lead Infrastructure Engineer will work our development teams, ensuring work is delivered to the standards set out in our best practice guides. The role requires the candidate to lead on various streams of work and provide technical support to Infrastructure engineers across the organisation. As a Lead Infrastructure Engineer , the candidate must perform at the level defined within the DDaT Capability Framework. You may be required to undertake line management responsibilities in this position: this will be discussed with the successful candidate. Management experience is not essential as training can be provided. Responsibilities You will be responsible for delivering the infrastructure and tooling to support a continuous delivery approach within Companies House. You will be user and service focused ensuring that value is delivered through improvement and automation of platform services. Working in a team of infrastructure specialists and engineers, a Lead Infrastructure Engineer builds, administers, supports, and maintains solutions as directed and according to departmental policy. Most of the time will be spent working with the delivery teams on carrying out the infrastructure work on development projects. This will include answering any queries regarding environment, configuration, and CI/CD processes. At this role level, you will: Ensure services are integrated, delivered, and operated as required. Work with technical architects to translate architectural designs into operations. Design and develop infrastructure as code, source code repositories, and Continuous Integration/Continuous Delivery pipelines to execute change on Cloud environments. Lead and support colleagues in non-functional requirements, ensuring availability, security, capacity, and performance for the platform and/or service. Transform technical requirements into an effective DevOps toolchain to enable product delivery. Ensure that deployment strategies for products are repeatable, scalable, and universally available. Have deep technical knowledge, providing support to delivery teams and solving complex problems. Ensuring best practice guides are maintained and adhered to. Ensure that integration is controlled, maintained and managed through Iaas, PaaS and SaaS cloud solutions. Work with stakeholders to deliver and configure solutions via multiple cloud estate providers. Lead on technical workstreams, ensuring delivery aligns with organisational goals and best practices. Carry out horizon scanning and impact assessments to identify emerging trends and technologies, evaluating their potential influence on our services. You can read more about a career in Digital and Data within the Civil Service in the Government Digital and Data Candidate Information Pack. Person specification We are looking for the following experience, which will be assessed at sift and at interview. Expert knowledge in: Terraform and Cloud technologies (preferably AWS) CI/CD tools (e.g., Concourse) Strong practical experience in: GitHub (source control and versioning) Containerisation (Docker) Unix/Linux Working knowledge of: Ansible Packer Specialist skills: DevOps : Programming languages such as Java, NodeJS, and Python DevSecOps : Cloud security principles and disaster recovery (e.g., AWS Control Tower, IAM solutions, encryption, MFA, governance and compliance ISO 27017 , DRaaS) Testing Infrastructure : Testing principles and frameworks (e.g., Selenium/Java, Playwright/TypeScript, BrowserStack, Karate DSL) Behaviours We'll assess you against these behaviours during the selection process: Delivering at Pace Leadership Making Effective Decisions Communicating and Influencing Technical skills We'll assess you against these technical skills during the selection process: Terraform & Cloud Provider Technology Understanding Containerisation (Docker) CI/ CD Tooling and Principles Benefits Alongside your salary of £53,540, Companies House contributes £15,510 towards you being a member of the Civil Service Defined Benefit Pension scheme. We believe that our success is driven by the well-being and satisfaction of our team members at all levels of the organisation. At Companies House we're committed to providing a comprehensive benefits package that goes beyond the ordinary, ensuring your career journey with us is not only fulfilling, but also rewarding. We pride ourselves on offering a quality work-life balance with our employee wellbeing being central to our working practices. Head to Our Benefits page to find out more about the fantastic benefits package we have at Companies House. We celebrate diversity As an equal opportunity employer, we celebrate diversity, being committed to ensuring we're representative of the citizens we serve and creating an inclusive environment. Everyone in Companies House brings something different, and so will you. To fulfil our commitment to recruiting and attracting diverse talent we welcome applications from underrepresented groups. We also welcome applications from Welsh speakers. We are proud to be a disability confident leader. Our recruitment process is fully inclusive and we can make adjustments as needed through our process. These could include having an interview buddy, extra time at interviews/assessments and receiving interview questions in advance, to name a few. If you require any reasonable adjustments at application stage, or if you'd like to discuss any person-centred adjustments, please contact us by emailing . Read our Applying under the Disability Confidence Sche,e (DCS) guide to find out how to successfully complete an application under the Disability Confidence Scheme (DCS). Where will you be working? We are currently using a hybrid approach to the way we work which provides opportunities for you to be adaptable in the way you work so that you can achieve a healthy balance between your work and home life. The degree of choice you have will depend on your role and your day-to-day work activities. Your manager will agree regular patterns of attendance with you; however, you may be required to make yourself available to attend the office more frequently when required to meet business needs. The team for this role is based in our Cardiff office, and a hybrid employment contract will be provided as the standard offering. However, remote contracts may be considered as an exception whereby commuting to the office location of your team is not reasonably practicable.
May 26, 2026
Full time
About the job Job summary We are looking for an enthusiastic Lead Infrastructure Engineer (Platform/DevOps) with great leadership and technical skills and a drive to improve. This role is a unique opportunity as you will be part of a team delivering Platform Infrastructure and systems to the highest standards and implementing the DevOps culture and principles across the business. Give yourself the best opportunity to apply! No need to register: just click on the link above to join, listen, and gain tips to help you apply. Cameras and microphones will be switched off. Can't make the session, or want something to refer back to? Just email our Outreach mailbox on: and we'll share a copy of the session slides. Companies House offers a flexible and welcoming culture that promotes a healthy work life balance as well as a proactive approach to wellbeing that allows us to be our best at work. We recognise that people are the key to our success so offer a fantastic benefits package including flexible working with no core hours, 30 days annual leave, 8 bank holidays and 1 privilege day as well as enrolment into the Civil Service Pension scheme with a contribution rate averaging 28%. Please note: Companies House cannot offer Visa sponsorship to candidates through this campaign. Security Clearance is an essential requirement for this campaign. You'll need to have been in the UK for at least 3 out of the last 5 years to be eligible to apply for SC. The team for this role is based in our Cardiff office, and a hybrid employment contract will be provided as the standard offering. However, remote contracts may be considered as an exception whereby commuting to the office location of your team is not reasonably practicable. We're able to consider full-time, part-time and compressed hours for this role for the successful candidate (part-time and compressed options would be a minimum of 30 hours over 4 or 5 days). Job description The position will be focussed on building and maintaining Infrastructure to enable the organisation to deliver rapidly and reliably deploy and innovate for our customers. A Lead Infrastructure Engineer will work our development teams, ensuring work is delivered to the standards set out in our best practice guides. The role requires the candidate to lead on various streams of work and provide technical support to Infrastructure engineers across the organisation. As a Lead Infrastructure Engineer , the candidate must perform at the level defined within the DDaT Capability Framework. You may be required to undertake line management responsibilities in this position: this will be discussed with the successful candidate. Management experience is not essential as training can be provided. Responsibilities You will be responsible for delivering the infrastructure and tooling to support a continuous delivery approach within Companies House. You will be user and service focused ensuring that value is delivered through improvement and automation of platform services. Working in a team of infrastructure specialists and engineers, a Lead Infrastructure Engineer builds, administers, supports, and maintains solutions as directed and according to departmental policy. Most of the time will be spent working with the delivery teams on carrying out the infrastructure work on development projects. This will include answering any queries regarding environment, configuration, and CI/CD processes. At this role level, you will: Ensure services are integrated, delivered, and operated as required. Work with technical architects to translate architectural designs into operations. Design and develop infrastructure as code, source code repositories, and Continuous Integration/Continuous Delivery pipelines to execute change on Cloud environments. Lead and support colleagues in non-functional requirements, ensuring availability, security, capacity, and performance for the platform and/or service. Transform technical requirements into an effective DevOps toolchain to enable product delivery. Ensure that deployment strategies for products are repeatable, scalable, and universally available. Have deep technical knowledge, providing support to delivery teams and solving complex problems. Ensuring best practice guides are maintained and adhered to. Ensure that integration is controlled, maintained and managed through Iaas, PaaS and SaaS cloud solutions. Work with stakeholders to deliver and configure solutions via multiple cloud estate providers. Lead on technical workstreams, ensuring delivery aligns with organisational goals and best practices. Carry out horizon scanning and impact assessments to identify emerging trends and technologies, evaluating their potential influence on our services. You can read more about a career in Digital and Data within the Civil Service in the Government Digital and Data Candidate Information Pack. Person specification We are looking for the following experience, which will be assessed at sift and at interview. Expert knowledge in: Terraform and Cloud technologies (preferably AWS) CI/CD tools (e.g., Concourse) Strong practical experience in: GitHub (source control and versioning) Containerisation (Docker) Unix/Linux Working knowledge of: Ansible Packer Specialist skills: DevOps : Programming languages such as Java, NodeJS, and Python DevSecOps : Cloud security principles and disaster recovery (e.g., AWS Control Tower, IAM solutions, encryption, MFA, governance and compliance ISO 27017 , DRaaS) Testing Infrastructure : Testing principles and frameworks (e.g., Selenium/Java, Playwright/TypeScript, BrowserStack, Karate DSL) Behaviours We'll assess you against these behaviours during the selection process: Delivering at Pace Leadership Making Effective Decisions Communicating and Influencing Technical skills We'll assess you against these technical skills during the selection process: Terraform & Cloud Provider Technology Understanding Containerisation (Docker) CI/ CD Tooling and Principles Benefits Alongside your salary of £53,540, Companies House contributes £15,510 towards you being a member of the Civil Service Defined Benefit Pension scheme. We believe that our success is driven by the well-being and satisfaction of our team members at all levels of the organisation. At Companies House we're committed to providing a comprehensive benefits package that goes beyond the ordinary, ensuring your career journey with us is not only fulfilling, but also rewarding. We pride ourselves on offering a quality work-life balance with our employee wellbeing being central to our working practices. Head to Our Benefits page to find out more about the fantastic benefits package we have at Companies House. We celebrate diversity As an equal opportunity employer, we celebrate diversity, being committed to ensuring we're representative of the citizens we serve and creating an inclusive environment. Everyone in Companies House brings something different, and so will you. To fulfil our commitment to recruiting and attracting diverse talent we welcome applications from underrepresented groups. We also welcome applications from Welsh speakers. We are proud to be a disability confident leader. Our recruitment process is fully inclusive and we can make adjustments as needed through our process. These could include having an interview buddy, extra time at interviews/assessments and receiving interview questions in advance, to name a few. If you require any reasonable adjustments at application stage, or if you'd like to discuss any person-centred adjustments, please contact us by emailing . Read our Applying under the Disability Confidence Sche,e (DCS) guide to find out how to successfully complete an application under the Disability Confidence Scheme (DCS). Where will you be working? We are currently using a hybrid approach to the way we work which provides opportunities for you to be adaptable in the way you work so that you can achieve a healthy balance between your work and home life. The degree of choice you have will depend on your role and your day-to-day work activities. Your manager will agree regular patterns of attendance with you; however, you may be required to make yourself available to attend the office more frequently when required to meet business needs. The team for this role is based in our Cardiff office, and a hybrid employment contract will be provided as the standard offering. However, remote contracts may be considered as an exception whereby commuting to the office location of your team is not reasonably practicable.
Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do The Principal IAM Engineer is the senior technical authority for identity services, responsible for designing, implementing, and governing enterprise-wide IAM capabilities across workforce, partner, and customer identities. This role combines deep hands-on engineering with architecture and leadership, driving the modernization of authentication, authorization, identity lifecycle, and privileged access controls across our cloud and on-prem environments. Responsibilities: Own the end to end technical delivery of IAM services, including identity lifecycle management, authentication, authorization, SSO, and privileged access controls, ensuring they are secure, scalable, and highly available. Lead design sessions, collaborating with Entrprise Architecture, and implementation of IAM integrations for SaaS, on prem, and AWS cloud platforms, including federation (SAML, OIDC, OAuth), MFA, and Passwordless capabilities. Serve as the primary escalation point for complex IAM engineering issues; perform root cause analysis and drive long term remediation and hardening of IAM platforms and related services. Partner with security architecture, infrastructure, application, and HR/IT teams to align IAM solutions with enterprise security strategy, compliance obligations, and business objectives. Define IAM engineering standards, patterns, and reference architectures; guide other engineers in implementing secure onboarding patterns for applications into IGA, PAM, and SSO platforms. Lead modernization initiatives. Contribute to audits, risk assessments, and regulatory reviews by providing technical evidence, designing compensating controls, and closing identified IAM control gaps. Mentor and coach IAM engineers and analysts, promoting engineering excellence, documentation discipline, and a culture of continuous learning and improvement. What You'll Bring 10+ years of experience in information security or infrastructure engineering, with at least 5 years of hands-on-keyboard experience with core IAM platforms. Deep expertise with the majority of our IAM stack Strong hands-on experience with Microsoft Entra ID and Active Directory as foundational directory services, and extensive experience implementing federation protocols (SAML, OIDC, OAuth2). Proven track record designing and implementing IAM solutions in hybrid multi-cloud environments, including the automation of provisioning, access reviews, and RBAC/ABAC models. Experience with secrets management solutions. Proficiency in at least one scripting or programming language (such as PowerShell, Python, or Java) to automate tasks and build custom connectors for our IAM tools. Excellent communication skills with the ability to translate complex technical concepts related to our IAM ecosystem for both technical and non-technical stakeholders. Exceptional sense of ownership and the ability to work with a limited set of requirements. Highly advanced ability to breakdown work to deliver value incrementally. Experience leading large-scale IAM programs. Prior responsibility as a technical lead or architect for IAM, including mentoring teams and influencing roadmaps beyond direct reporting lines. Demonstrated ability to balance security, usability, and operational efficiency, with a strong bias toward automation and measurable risk reduction. Define and lead the implementation of the organization's security strategy, with a focus on Cloud Security, Identity Access Management, and all other aspects of Cybersecurity Oversee the deployment of IAM solutions across both on-premise and cloud environments, ensuring they meet the highest standards of security. Lead the most complex security assessments, including threat modeling, red teaming, and cloud security reviews. Collaborate with executive leadership to ensure that security initiatives align with the organization's strategic goals and risk appetite. Act as the technical lead for large-scale security projects, coordinating cross-functional teams to ensure successful delivery. Architect and implement solutions across workforce IAM, PAM, and customer IAM ecosystems. Provide thought leadership in adopting passwordless authentication, passkeys, adaptive MFA, and AI-driven access orchestration strategies Engineer integrations with Agentic AI tools for intelligent decisioning, policy enforcement, and autonomous identity lifecycle operations. Develop and implement automated provisioning/deprovisioning workflows Ensure integration of IAM with cloud platforms (Azure, AWS, GCP) and SaaS applications. Mentor and develop the skills of senior security engineers, fostering a culture of continuous improvement and innovation. Technical Experience Must-Have: Privileged Access management (CyberArk) Authentication/AuthN (Okta) Federated Identity (EntraID) Cloud Identity (AWS, GCP, Azure) Automation (terraform, codex, claude) Application SSO (OIDC, SAML) Identity Governance (Sailpoint, Okta, Veza) Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.
May 21, 2026
Full time
Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do The Principal IAM Engineer is the senior technical authority for identity services, responsible for designing, implementing, and governing enterprise-wide IAM capabilities across workforce, partner, and customer identities. This role combines deep hands-on engineering with architecture and leadership, driving the modernization of authentication, authorization, identity lifecycle, and privileged access controls across our cloud and on-prem environments. Responsibilities: Own the end to end technical delivery of IAM services, including identity lifecycle management, authentication, authorization, SSO, and privileged access controls, ensuring they are secure, scalable, and highly available. Lead design sessions, collaborating with Entrprise Architecture, and implementation of IAM integrations for SaaS, on prem, and AWS cloud platforms, including federation (SAML, OIDC, OAuth), MFA, and Passwordless capabilities. Serve as the primary escalation point for complex IAM engineering issues; perform root cause analysis and drive long term remediation and hardening of IAM platforms and related services. Partner with security architecture, infrastructure, application, and HR/IT teams to align IAM solutions with enterprise security strategy, compliance obligations, and business objectives. Define IAM engineering standards, patterns, and reference architectures; guide other engineers in implementing secure onboarding patterns for applications into IGA, PAM, and SSO platforms. Lead modernization initiatives. Contribute to audits, risk assessments, and regulatory reviews by providing technical evidence, designing compensating controls, and closing identified IAM control gaps. Mentor and coach IAM engineers and analysts, promoting engineering excellence, documentation discipline, and a culture of continuous learning and improvement. What You'll Bring 10+ years of experience in information security or infrastructure engineering, with at least 5 years of hands-on-keyboard experience with core IAM platforms. Deep expertise with the majority of our IAM stack Strong hands-on experience with Microsoft Entra ID and Active Directory as foundational directory services, and extensive experience implementing federation protocols (SAML, OIDC, OAuth2). Proven track record designing and implementing IAM solutions in hybrid multi-cloud environments, including the automation of provisioning, access reviews, and RBAC/ABAC models. Experience with secrets management solutions. Proficiency in at least one scripting or programming language (such as PowerShell, Python, or Java) to automate tasks and build custom connectors for our IAM tools. Excellent communication skills with the ability to translate complex technical concepts related to our IAM ecosystem for both technical and non-technical stakeholders. Exceptional sense of ownership and the ability to work with a limited set of requirements. Highly advanced ability to breakdown work to deliver value incrementally. Experience leading large-scale IAM programs. Prior responsibility as a technical lead or architect for IAM, including mentoring teams and influencing roadmaps beyond direct reporting lines. Demonstrated ability to balance security, usability, and operational efficiency, with a strong bias toward automation and measurable risk reduction. Define and lead the implementation of the organization's security strategy, with a focus on Cloud Security, Identity Access Management, and all other aspects of Cybersecurity Oversee the deployment of IAM solutions across both on-premise and cloud environments, ensuring they meet the highest standards of security. Lead the most complex security assessments, including threat modeling, red teaming, and cloud security reviews. Collaborate with executive leadership to ensure that security initiatives align with the organization's strategic goals and risk appetite. Act as the technical lead for large-scale security projects, coordinating cross-functional teams to ensure successful delivery. Architect and implement solutions across workforce IAM, PAM, and customer IAM ecosystems. Provide thought leadership in adopting passwordless authentication, passkeys, adaptive MFA, and AI-driven access orchestration strategies Engineer integrations with Agentic AI tools for intelligent decisioning, policy enforcement, and autonomous identity lifecycle operations. Develop and implement automated provisioning/deprovisioning workflows Ensure integration of IAM with cloud platforms (Azure, AWS, GCP) and SaaS applications. Mentor and develop the skills of senior security engineers, fostering a culture of continuous improvement and innovation. Technical Experience Must-Have: Privileged Access management (CyberArk) Authentication/AuthN (Okta) Federated Identity (EntraID) Cloud Identity (AWS, GCP, Azure) Automation (terraform, codex, claude) Application SSO (OIDC, SAML) Identity Governance (Sailpoint, Okta, Veza) Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.
Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do The Principal IAM Engineer is the senior technical authority for identity services, responsible for designing, implementing, and governing enterprise-wide IAM capabilities across workforce, partner, and customer identities. This role combines deep hands-on engineering with architecture and leadership, driving the modernization of authentication, authorization, identity lifecycle, and privileged access controls across our cloud and on-prem environments. Responsibilities: Own the end to end technical delivery of IAM services, including identity lifecycle management, authentication, authorization, SSO, and privileged access controls, ensuring they are secure, scalable, and highly available. Lead design sessions, collaborating with Entrprise Architecture, and implementation of IAM integrations for SaaS, on prem, and AWS cloud platforms, including federation (SAML, OIDC, OAuth), MFA, and Passwordless capabilities. Serve as the primary escalation point for complex IAM engineering issues; perform root cause analysis and drive long term remediation and hardening of IAM platforms and related services. Partner with security architecture, infrastructure, application, and HR/IT teams to align IAM solutions with enterprise security strategy, compliance obligations, and business objectives. Define IAM engineering standards, patterns, and reference architectures; guide other engineers in implementing secure onboarding patterns for applications into IGA, PAM, and SSO platforms. Lead modernization initiatives. Contribute to audits, risk assessments, and regulatory reviews by providing technical evidence, designing compensating controls, and closing identified IAM control gaps. Mentor and coach IAM engineers and analysts, promoting engineering excellence, documentation discipline, and a culture of continuous learning and improvement. What You'll Bring 10+ years of experience in information security or infrastructure engineering, with at least 5 years of hands-on-keyboard experience with core IAM platforms. Deep expertise with the majority of our IAM stack Strong hands-on experience with Microsoft Entra ID and Active Directory as foundational directory services, and extensive experience implementing federation protocols (SAML, OIDC, OAuth2). Proven track record designing and implementing IAM solutions in hybrid multi-cloud environments, including the automation of provisioning, access reviews, and RBAC/ABAC models. Experience with secrets management solutions. Proficiency in at least one scripting or programming language (such as PowerShell, Python, or Java) to automate tasks and build custom connectors for our IAM tools. Excellent communication skills with the ability to translate complex technical concepts related to our IAM ecosystem for both technical and non-technical stakeholders. Exceptional sense of ownership and the ability to work with a limited set of requirements. Highly advanced ability to breakdown work to deliver value incrementally. Experience leading large-scale IAM programs. Prior responsibility as a technical lead or architect for IAM, including mentoring teams and influencing roadmaps beyond direct reporting lines. Demonstrated ability to balance security, usability, and operational efficiency, with a strong bias toward automation and measurable risk reduction. Define and lead the implementation of the organization's security strategy, with a focus on Cloud Security, Identity Access Management, and all other aspects of Cybersecurity Oversee the deployment of IAM solutions across both on-premise and cloud environments, ensuring they meet the highest standards of security. Lead the most complex security assessments, including threat modeling, red teaming, and cloud security reviews. Collaborate with executive leadership to ensure that security initiatives align with the organization's strategic goals and risk appetite. Act as the technical lead for large-scale security projects, coordinating cross-functional teams to ensure successful delivery. Architect and implement solutions across workforce IAM, PAM, and customer IAM ecosystems. Provide thought leadership in adopting passwordless authentication, passkeys, adaptive MFA, and AI-driven access orchestration strategies Engineer integrations with Agentic AI tools for intelligent decisioning, policy enforcement, and autonomous identity lifecycle operations. Develop and implement automated provisioning/deprovisioning workflows Ensure integration of IAM with cloud platforms (Azure, AWS, GCP) and SaaS applications. Mentor and develop the skills of senior security engineers, fostering a culture of continuous improvement and innovation. Technical Experience Must-Have: Privileged Access management (CyberArk) Authentication/AuthN (Okta) Federated Identity (EntraID) Cloud Identity (AWS, GCP, Azure) Automation (terraform, codex, claude) Application SSO (OIDC, SAML) Identity Governance (Sailpoint, Okta, Veza) Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.
May 21, 2026
Full time
Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do The Principal IAM Engineer is the senior technical authority for identity services, responsible for designing, implementing, and governing enterprise-wide IAM capabilities across workforce, partner, and customer identities. This role combines deep hands-on engineering with architecture and leadership, driving the modernization of authentication, authorization, identity lifecycle, and privileged access controls across our cloud and on-prem environments. Responsibilities: Own the end to end technical delivery of IAM services, including identity lifecycle management, authentication, authorization, SSO, and privileged access controls, ensuring they are secure, scalable, and highly available. Lead design sessions, collaborating with Entrprise Architecture, and implementation of IAM integrations for SaaS, on prem, and AWS cloud platforms, including federation (SAML, OIDC, OAuth), MFA, and Passwordless capabilities. Serve as the primary escalation point for complex IAM engineering issues; perform root cause analysis and drive long term remediation and hardening of IAM platforms and related services. Partner with security architecture, infrastructure, application, and HR/IT teams to align IAM solutions with enterprise security strategy, compliance obligations, and business objectives. Define IAM engineering standards, patterns, and reference architectures; guide other engineers in implementing secure onboarding patterns for applications into IGA, PAM, and SSO platforms. Lead modernization initiatives. Contribute to audits, risk assessments, and regulatory reviews by providing technical evidence, designing compensating controls, and closing identified IAM control gaps. Mentor and coach IAM engineers and analysts, promoting engineering excellence, documentation discipline, and a culture of continuous learning and improvement. What You'll Bring 10+ years of experience in information security or infrastructure engineering, with at least 5 years of hands-on-keyboard experience with core IAM platforms. Deep expertise with the majority of our IAM stack Strong hands-on experience with Microsoft Entra ID and Active Directory as foundational directory services, and extensive experience implementing federation protocols (SAML, OIDC, OAuth2). Proven track record designing and implementing IAM solutions in hybrid multi-cloud environments, including the automation of provisioning, access reviews, and RBAC/ABAC models. Experience with secrets management solutions. Proficiency in at least one scripting or programming language (such as PowerShell, Python, or Java) to automate tasks and build custom connectors for our IAM tools. Excellent communication skills with the ability to translate complex technical concepts related to our IAM ecosystem for both technical and non-technical stakeholders. Exceptional sense of ownership and the ability to work with a limited set of requirements. Highly advanced ability to breakdown work to deliver value incrementally. Experience leading large-scale IAM programs. Prior responsibility as a technical lead or architect for IAM, including mentoring teams and influencing roadmaps beyond direct reporting lines. Demonstrated ability to balance security, usability, and operational efficiency, with a strong bias toward automation and measurable risk reduction. Define and lead the implementation of the organization's security strategy, with a focus on Cloud Security, Identity Access Management, and all other aspects of Cybersecurity Oversee the deployment of IAM solutions across both on-premise and cloud environments, ensuring they meet the highest standards of security. Lead the most complex security assessments, including threat modeling, red teaming, and cloud security reviews. Collaborate with executive leadership to ensure that security initiatives align with the organization's strategic goals and risk appetite. Act as the technical lead for large-scale security projects, coordinating cross-functional teams to ensure successful delivery. Architect and implement solutions across workforce IAM, PAM, and customer IAM ecosystems. Provide thought leadership in adopting passwordless authentication, passkeys, adaptive MFA, and AI-driven access orchestration strategies Engineer integrations with Agentic AI tools for intelligent decisioning, policy enforcement, and autonomous identity lifecycle operations. Develop and implement automated provisioning/deprovisioning workflows Ensure integration of IAM with cloud platforms (Azure, AWS, GCP) and SaaS applications. Mentor and develop the skills of senior security engineers, fostering a culture of continuous improvement and innovation. Technical Experience Must-Have: Privileged Access management (CyberArk) Authentication/AuthN (Okta) Federated Identity (EntraID) Cloud Identity (AWS, GCP, Azure) Automation (terraform, codex, claude) Application SSO (OIDC, SAML) Identity Governance (Sailpoint, Okta, Veza) Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.
IT Consultant (Identity & Access / Active Directory) Join a growing consultancy team delivering Active Directory, identity management, Microsoft Entra ID (Azure AD), and IT infrastructure solutions. This role offers hands-on experience in enterprise migrations, cloud identity, and digital transformation projects. If you've also worked in the following roles, we'd also like to hear from you: Systems Administrator, Infrastructure Engineer, Network Engineer, Technical Consultant, IT Support Engineer, Infrastructure Consultant, IAM Consultant, Identity & Access Management (IAM) Consultant, Active Directory Consultant This position is officially known within the organisation as an Associate Consultant (Identity & Access) SALARY: £45,000 to £55,000 per annum (depending on experience) + Benefits LOCATION: Remote / Home Based - with occasional travel to customer sites UK-wide and the Bristol office when required JOB TYPE: Full-Time,6 Month Fixed-Term Contract WORKING HOURS: Monday to Friday, 37.5 hours per week JOB OVERVIEW We have a fantastic new job opportunity for an IT Consultant (Identity & Access / Active Directory) to join a specialist consultancy delivering enterprise IT infrastructure and identity management solutions. The IT Consultant will support Active Directory migrations and Microsoft Entra ID (Azure AD) environments. Working within a structured delivery team, the IT Consultant (Identity & Access / Active Directory) will contribute to identity and access management projects, including directory migrations, cloud synchronisation, and infrastructure modernisation. This role offers exposure to Active Directory, Azure AD / Entra ID, cybersecurity, and hybrid cloud environments, supporting large-scale migrations while developing technical consultancy skills. The company specialise in helping organisations maximise their investments in Microsoft 365, Azure and Teams voice management. They provide expert consultancy, 24/7 support, and automation-driven administration and configuration services to streamline communication, enhance collaboration and boost productivity for their clients. DUTIES Your duties as the IT Consultant (Identity & Access / Active Directory) include: Support AD Migrations: Assist with Active Directory migrations, consolidations, and restructures Implement Infrastructure: Configure domain controllers, replication, DNS, and core infrastructure services Manage Group Policy: Design and troubleshoot OU structures and Group Policy configurations Execute Migration Waves: Support pilots, cutovers, and validation activities Troubleshoot Identity Issues: Resolve authentication, directory, and policy-related problems Collaborate Across Teams: Work with infrastructure, security, and application teams Maintain Documentation: Produce build notes, validation evidence, and technical records Support Entra ID Integration: Assist with Microsoft Entra ID (Azure AD) synchronisation and identity management Follow Runbooks: Execute and improve structured delivery processes and checklists Provide Hypercare Support: Assist during early life support following project delivery CANDIDATE REQUIREMENTS Essential Previous experience supporting Active Directory migrations and restructures Strong knowledge of Active Directory including domains, forests, trusts, DNS, and replication Experience using migration tools (e.g., Quest) for staged migrations and reporting Proven experience with Group Policy, OU design, and delegated administration Experience in identity management and directory object clean-up and remediation Ability to follow structured processes, runbooks, and validation procedures Strong troubleshooting skills across authentication and directory services Excellent communication and documentation skills Right to work in the UK Desirable Understanding of Microsoft Entra ID (Azure AD) and directory synchronisation concepts Experience supporting privileged access models and security hardening Knowledge of endpoint migration and domain join processes Experience contributing to operational handover and support documentation Familiarity with cloud computing and hybrid IT infrastructure environments WHY JOIN Supportive team culture with a focus on learning and development Exposure to enterprise-level deployments and cutting-edge technologies Great employee benefits which include: 25 days holiday (plus bank holidays) Company pension Income Protection Health Cash Plan Death in Service (4 x salary) Training & Development Employee discounts Volunteer Day Don't meet every requirement? If you're passionate about IT and excited about this role, we still encourage you to apply - even if your experience doesn't perfectly match all the requirements. You may be exactly who the company is looking for. APPLY TODAY By submitting your job application to us you are hereby giving us your express consent to submit your details to our Client for this purpose. JOB REF: AWDO-C14661 Full-Time, Fixed Term Contract IT Jobs, Careers and Vacancies. Find a new job and work Remote / Home Based. Multi-Job Board Advertising and CV Sourcing Recruitment Services provided by AWD online. AWD online specialise in sourcing candidates and advertising vacancies on multiple job boards for companies on a non-commission basis. AWD online operates as an employment agency. AWD-IN-SPJ
May 19, 2026
Contractor
IT Consultant (Identity & Access / Active Directory) Join a growing consultancy team delivering Active Directory, identity management, Microsoft Entra ID (Azure AD), and IT infrastructure solutions. This role offers hands-on experience in enterprise migrations, cloud identity, and digital transformation projects. If you've also worked in the following roles, we'd also like to hear from you: Systems Administrator, Infrastructure Engineer, Network Engineer, Technical Consultant, IT Support Engineer, Infrastructure Consultant, IAM Consultant, Identity & Access Management (IAM) Consultant, Active Directory Consultant This position is officially known within the organisation as an Associate Consultant (Identity & Access) SALARY: £45,000 to £55,000 per annum (depending on experience) + Benefits LOCATION: Remote / Home Based - with occasional travel to customer sites UK-wide and the Bristol office when required JOB TYPE: Full-Time,6 Month Fixed-Term Contract WORKING HOURS: Monday to Friday, 37.5 hours per week JOB OVERVIEW We have a fantastic new job opportunity for an IT Consultant (Identity & Access / Active Directory) to join a specialist consultancy delivering enterprise IT infrastructure and identity management solutions. The IT Consultant will support Active Directory migrations and Microsoft Entra ID (Azure AD) environments. Working within a structured delivery team, the IT Consultant (Identity & Access / Active Directory) will contribute to identity and access management projects, including directory migrations, cloud synchronisation, and infrastructure modernisation. This role offers exposure to Active Directory, Azure AD / Entra ID, cybersecurity, and hybrid cloud environments, supporting large-scale migrations while developing technical consultancy skills. The company specialise in helping organisations maximise their investments in Microsoft 365, Azure and Teams voice management. They provide expert consultancy, 24/7 support, and automation-driven administration and configuration services to streamline communication, enhance collaboration and boost productivity for their clients. DUTIES Your duties as the IT Consultant (Identity & Access / Active Directory) include: Support AD Migrations: Assist with Active Directory migrations, consolidations, and restructures Implement Infrastructure: Configure domain controllers, replication, DNS, and core infrastructure services Manage Group Policy: Design and troubleshoot OU structures and Group Policy configurations Execute Migration Waves: Support pilots, cutovers, and validation activities Troubleshoot Identity Issues: Resolve authentication, directory, and policy-related problems Collaborate Across Teams: Work with infrastructure, security, and application teams Maintain Documentation: Produce build notes, validation evidence, and technical records Support Entra ID Integration: Assist with Microsoft Entra ID (Azure AD) synchronisation and identity management Follow Runbooks: Execute and improve structured delivery processes and checklists Provide Hypercare Support: Assist during early life support following project delivery CANDIDATE REQUIREMENTS Essential Previous experience supporting Active Directory migrations and restructures Strong knowledge of Active Directory including domains, forests, trusts, DNS, and replication Experience using migration tools (e.g., Quest) for staged migrations and reporting Proven experience with Group Policy, OU design, and delegated administration Experience in identity management and directory object clean-up and remediation Ability to follow structured processes, runbooks, and validation procedures Strong troubleshooting skills across authentication and directory services Excellent communication and documentation skills Right to work in the UK Desirable Understanding of Microsoft Entra ID (Azure AD) and directory synchronisation concepts Experience supporting privileged access models and security hardening Knowledge of endpoint migration and domain join processes Experience contributing to operational handover and support documentation Familiarity with cloud computing and hybrid IT infrastructure environments WHY JOIN Supportive team culture with a focus on learning and development Exposure to enterprise-level deployments and cutting-edge technologies Great employee benefits which include: 25 days holiday (plus bank holidays) Company pension Income Protection Health Cash Plan Death in Service (4 x salary) Training & Development Employee discounts Volunteer Day Don't meet every requirement? If you're passionate about IT and excited about this role, we still encourage you to apply - even if your experience doesn't perfectly match all the requirements. You may be exactly who the company is looking for. APPLY TODAY By submitting your job application to us you are hereby giving us your express consent to submit your details to our Client for this purpose. JOB REF: AWDO-C14661 Full-Time, Fixed Term Contract IT Jobs, Careers and Vacancies. Find a new job and work Remote / Home Based. Multi-Job Board Advertising and CV Sourcing Recruitment Services provided by AWD online. AWD online specialise in sourcing candidates and advertising vacancies on multiple job boards for companies on a non-commission basis. AWD online operates as an employment agency. AWD-IN-SPJ
Cyber Solution Architect (Digital Platforms & Trading Systems) 8-Month contract - Inside IR35 - market rate London based - hybrid working - 3 days a week onsite Must have Base Metals trading experience Role Overview We are looking for a hands-on, highly technical Cyber Solution Architect to design and deliver secure solutions across our digital platform ecosystem, with a strong focus on Base Metals Order Execution Management Systems (OEMS). This role requires deep technical expertise, practical implementation capability, and the ability to embed security into complex, low-latency trading environments. Key Responsibilities Design and implement secure, scalable cyber solutions for digital platforms, including OEMS and associated trading infrastructure. Act as a hands-on architect, contributing directly to solution design, engineering decisions, and security implementation. Develop and maintain security architecture patterns, reference models, and solution blueprints. Lead security design for Base Metals OEMS platforms, ensuring alignment with performance, resilience, and regulatory requirements. Perform threat modelling, security risk assessments, and architecture reviews. Integrate security into DevOps pipelines, promoting DevSecOps best practices. Collaborate with engineering, infrastructure, and business teams to ensure security is embedded by design. Provide technical oversight on identity and access management (IAM), encryption, API security, and network security. Evaluate and implement security tooling (e.g., SIEM, EDR, DLP, WAF) within platform environments. Support incident response activities and provide expert guidance on security incidents affecting trading systems. Required Skills & Experience Proven experience in a Cyber Solution Architect role with strong hands-on delivery capability. Deep technical knowledge across application, infrastructure, network, and cloud security domains. Demonstrated experience securing digital platforms in complex enterprise environments. Strong understanding of Order Execution Management Systems (OEMS), ideally within Base Metals or commodities trading. Experience in commodities or financial trading environments (particularly Base Metals). Understanding of regulatory requirements relevant to trading systems. Knowledge of trading workflows, low-latency systems, and associated cyber risks. Experience with cloud platforms (AWS, Azure, or GCP) and cloud-native security architecture. Strong familiarity with security frameworks (e.g., NIST, ISO 27001, CIS). Experience implementing security controls including IAM, encryption, endpoint protection, and monitoring solutions. Proficiency in scripting or programming (e.g., Python, PowerShell, Bash). Desirable Skills Experience with high-frequency or algorithmic trading security. Knowledge of Zero Trust architecture and modern identity frameworks. Relevant certifications such as CISSP, CCSP, or TOGAF. Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.
May 19, 2026
Contractor
Cyber Solution Architect (Digital Platforms & Trading Systems) 8-Month contract - Inside IR35 - market rate London based - hybrid working - 3 days a week onsite Must have Base Metals trading experience Role Overview We are looking for a hands-on, highly technical Cyber Solution Architect to design and deliver secure solutions across our digital platform ecosystem, with a strong focus on Base Metals Order Execution Management Systems (OEMS). This role requires deep technical expertise, practical implementation capability, and the ability to embed security into complex, low-latency trading environments. Key Responsibilities Design and implement secure, scalable cyber solutions for digital platforms, including OEMS and associated trading infrastructure. Act as a hands-on architect, contributing directly to solution design, engineering decisions, and security implementation. Develop and maintain security architecture patterns, reference models, and solution blueprints. Lead security design for Base Metals OEMS platforms, ensuring alignment with performance, resilience, and regulatory requirements. Perform threat modelling, security risk assessments, and architecture reviews. Integrate security into DevOps pipelines, promoting DevSecOps best practices. Collaborate with engineering, infrastructure, and business teams to ensure security is embedded by design. Provide technical oversight on identity and access management (IAM), encryption, API security, and network security. Evaluate and implement security tooling (e.g., SIEM, EDR, DLP, WAF) within platform environments. Support incident response activities and provide expert guidance on security incidents affecting trading systems. Required Skills & Experience Proven experience in a Cyber Solution Architect role with strong hands-on delivery capability. Deep technical knowledge across application, infrastructure, network, and cloud security domains. Demonstrated experience securing digital platforms in complex enterprise environments. Strong understanding of Order Execution Management Systems (OEMS), ideally within Base Metals or commodities trading. Experience in commodities or financial trading environments (particularly Base Metals). Understanding of regulatory requirements relevant to trading systems. Knowledge of trading workflows, low-latency systems, and associated cyber risks. Experience with cloud platforms (AWS, Azure, or GCP) and cloud-native security architecture. Strong familiarity with security frameworks (e.g., NIST, ISO 27001, CIS). Experience implementing security controls including IAM, encryption, endpoint protection, and monitoring solutions. Proficiency in scripting or programming (e.g., Python, PowerShell, Bash). Desirable Skills Experience with high-frequency or algorithmic trading security. Knowledge of Zero Trust architecture and modern identity frameworks. Relevant certifications such as CISSP, CCSP, or TOGAF. Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.
Pontoon is an employment consultancy. We put expertise, energy, and enthusiasm into improving everyone's chance of being part of the workplace. We respect and appreciate people of all ethnicities, generations, religious beliefs, sexual orientations, gender identities, and more. We do this by showcasing their talents, skills, and unique experience in an inclusive environment that helps them thrive. Are you an innovative Endpoint Security Engineer looking for an exciting opportunity to enhance global security operations? Join our client's dynamic team, where your expertise will help shape the future of endpoint security! Role: Endpoint Security Engineer Duration: 12 Months (extension Options) Location: Chester (Hybrid 3 days in Office) Rate: £ 550 per day (umbrella) Why Join Us? At our organization, we believe in fostering a collaborative environment where creativity and security go hand in hand. You'll work alongside dedicated professionals who are passionate about protecting digital assets while supporting cloud migration initiatives. Key Responsibilities: Drive Cloud Migration: Contribute to a major cloud migration program, ensuring seamless transitions and robust security measures. Engineer Security Solutions: Design, implement, and support cutting-edge endpoint security solutions using Trellix, BeyondTrust, and CrowdStrike. Deploy Solutions: Utilize ITSM systems like Remedy and ServiceNow for effective enterprise security deployments. Documentation & Workflows: Produce high-quality technical documentation, workflows, and support materials to guide best practices. Collaborate & Optimize: Partner with security vendor consultants and Technical Account Managers to maximize product performance. Align Compliance Standards: Work closely with compliance, audit, and information security teams to maintain organizational standards. Research & Consultancy: Conduct thorough research and provide informed consultancy on the latest security solutions and trends. Manage Configurations: Define and maintain security baseline configurations, ensuring the highest standards are met. Rapid Response: Address operational issues promptly and efficiently, adapting to a fast-paced global environment. Required Technical Skills & Certifications: Proven experience in endpoint security, with a strong background in both engineering and support roles. Expertise in Application Control, particularly with BeyondTrust solutions. Proficient in scripting with PowerShell and Python-essential skills for this role! Familiarity with Trellix ePO, BeyondTrust EPM Cloud, and policy management in Azure and AWS. Advanced knowledge of Microsoft Windows operating systems. Strong analytical and problem-solving skills to tackle complex security challenges. Exposure to data analytics tools like Splunk and Power BI. Essential Skills: Excellent workflow management, communication, and interpersonal abilities. Experience with EPM Cloud Migration (this role focuses on EPM, not IAM ). Ability to create clear and effective documentation, including diagrams and technical architecture. Knowledge of governance, risk management, and administrative oversight of workstreams. Quick learner with a knack for sharing knowledge and applying research-driven solutions. Proven ability to thrive under pressure and respond swiftly to emerging challenges. Experience collaborating with architecture and engineering teams on Windows platform design. Desired Skills: Understanding of cloud technologies, especially Azure and AWS. Security certifications, preferably CISSP. Experience supporting macOS/iOS environments would be a plus! What's Next? If you're ready to take your career to the next level and make a significant impact in the world of endpoint security, we want to hear from you! Apply today to join our dedicated team and help shape the future of security! Apply Now! Let's secure the digital future together! Candidates will ideally show evidence of the above in their CV in order to be considered. Please be advised if you haven't heard from us within 48 hours then unfortunately your application has not been successful on this occasion, we may however keep your details on file for any suitable future vacancies and contact you accordingly. Pontoon is an employment consultancy and operates as an equal opportunities employer.
May 03, 2026
Contractor
Pontoon is an employment consultancy. We put expertise, energy, and enthusiasm into improving everyone's chance of being part of the workplace. We respect and appreciate people of all ethnicities, generations, religious beliefs, sexual orientations, gender identities, and more. We do this by showcasing their talents, skills, and unique experience in an inclusive environment that helps them thrive. Are you an innovative Endpoint Security Engineer looking for an exciting opportunity to enhance global security operations? Join our client's dynamic team, where your expertise will help shape the future of endpoint security! Role: Endpoint Security Engineer Duration: 12 Months (extension Options) Location: Chester (Hybrid 3 days in Office) Rate: £ 550 per day (umbrella) Why Join Us? At our organization, we believe in fostering a collaborative environment where creativity and security go hand in hand. You'll work alongside dedicated professionals who are passionate about protecting digital assets while supporting cloud migration initiatives. Key Responsibilities: Drive Cloud Migration: Contribute to a major cloud migration program, ensuring seamless transitions and robust security measures. Engineer Security Solutions: Design, implement, and support cutting-edge endpoint security solutions using Trellix, BeyondTrust, and CrowdStrike. Deploy Solutions: Utilize ITSM systems like Remedy and ServiceNow for effective enterprise security deployments. Documentation & Workflows: Produce high-quality technical documentation, workflows, and support materials to guide best practices. Collaborate & Optimize: Partner with security vendor consultants and Technical Account Managers to maximize product performance. Align Compliance Standards: Work closely with compliance, audit, and information security teams to maintain organizational standards. Research & Consultancy: Conduct thorough research and provide informed consultancy on the latest security solutions and trends. Manage Configurations: Define and maintain security baseline configurations, ensuring the highest standards are met. Rapid Response: Address operational issues promptly and efficiently, adapting to a fast-paced global environment. Required Technical Skills & Certifications: Proven experience in endpoint security, with a strong background in both engineering and support roles. Expertise in Application Control, particularly with BeyondTrust solutions. Proficient in scripting with PowerShell and Python-essential skills for this role! Familiarity with Trellix ePO, BeyondTrust EPM Cloud, and policy management in Azure and AWS. Advanced knowledge of Microsoft Windows operating systems. Strong analytical and problem-solving skills to tackle complex security challenges. Exposure to data analytics tools like Splunk and Power BI. Essential Skills: Excellent workflow management, communication, and interpersonal abilities. Experience with EPM Cloud Migration (this role focuses on EPM, not IAM ). Ability to create clear and effective documentation, including diagrams and technical architecture. Knowledge of governance, risk management, and administrative oversight of workstreams. Quick learner with a knack for sharing knowledge and applying research-driven solutions. Proven ability to thrive under pressure and respond swiftly to emerging challenges. Experience collaborating with architecture and engineering teams on Windows platform design. Desired Skills: Understanding of cloud technologies, especially Azure and AWS. Security certifications, preferably CISSP. Experience supporting macOS/iOS environments would be a plus! What's Next? If you're ready to take your career to the next level and make a significant impact in the world of endpoint security, we want to hear from you! Apply today to join our dedicated team and help shape the future of security! Apply Now! Let's secure the digital future together! Candidates will ideally show evidence of the above in their CV in order to be considered. Please be advised if you haven't heard from us within 48 hours then unfortunately your application has not been successful on this occasion, we may however keep your details on file for any suitable future vacancies and contact you accordingly. Pontoon is an employment consultancy and operates as an equal opportunities employer.
DevSecOps Engineer Brockworth, Gloucester, Gloucestershire, South West UK 35044 - 86100 plus BUPA, benefits and bonus 37.5 hours + 4 Day Work Week option Lockheed Martin Rotary and Mission Systems (RMS) provides systems engineering, software development, training solutions and complex program management for global security, civil and commercial markets. Simply stated, our mission is to be the world's leading global security and aerospace company. The role: We are seeking DevSecOps Engineers at a variety of levels of seniority. Join Our Team as an DevSecOps Engineer (with a Focus on Infrastructure Engineering). You'll play a pivotal role in integrating, administering and securing a range of systems and applications, with a strong focus on designing, building, and maintaining scalable, reliable, and secure infrastructure. As an Engineer within our DevSecOps team, you'll be at the forefront of driving innovation and safeguarding digital infrastructures by ensuring robust, high-performance systems that support our mission-critical solutions. You'll need to have an understanding of Windows and Linux systems and DevSecOps principles and experience of working within a multi-disciplined team. Knowledge and understanding of core software tools, methods, and frameworks to reliably integrate and deploy, integrate, and test features into environments to ensure optimum outcomes for our customers. Additionally, we're looking for candidates with hands-on experience in infrastructure engineering, including expertise in areas such as cloud architecture, containerization (e.g., Docker, Kubernetes), infrastructure-as-code (e.g., Terraform, Ansible), and system performance optimization to support seamless integration and testing processes. Key Responsibilities: Design, build, deploy and manage a broad set of IT Infrastructure aligning to customer needs and requirements, while leveraging infrastructure engineering best practices to maintain system reliability and scalability with a focus on automation and repeatability. Develop Infrastructure as Code and scripts and integrate those with CI/CD pipelines and a wider ecosystem of tools, prioritising automation to streamline deployments. Provide full end to end systems lifecycle management covering architecture, design, deployment and support through to decommissioning and migration. Support the integration and delivery of large and complex solutions into a wider system-of-systems, ensuring infrastructure components are robust and interoperable. Opportunities to experience the cloud by undertaking deployments in Public, Private, and Hybrid Cloud environments, addressing potential constraints while optimizing infrastructure performance and security. If you're passionate about DevSecOps, with a strong focus and background in Infrastructure Engineering, and eager to take your career to the next level, we want to hear from you! Apply now to join our team and embark on an exciting journey of innovation and growth. Required skills, qualifications and experience : Advanced understanding of DevSecOps. The ability to work within an agile environment and delivering using Scrum and Sprints utilising tools such as Jira and Confluence to help planning and collaboration. Expert in Windows and Linux systems administration (Active Directory etc). Expert in Virtualisation technologies and concepts - VMware vsphere, ARIA Ops performance monitoring, software defined networking - NSX. Advanced understanding of Web proxy servers and configuration - Squid. Experience of Automation technologies Terraform and Ansible for complex builds, Packer. Experience of CI/CD pipeline builds - Jenkins. Understanding of Git/Bitbucket/GitLab integration, coding and branching strategies. Proficient in the use and administration of Containerisation technologies - Kubernetes, Docker. Proficient in Powershell, bash scripting. Proficient in Python. Proficient in the use of Networking skills - IPv4 addressing and routing. Experience of Logging and monitoring using Zabbix and Splunk. Experience of Cloud and AWS concepts and technologies. Desired Skills: Ability to support maturation of automated CI/CD software pipelines for Cloud deployments. Understanding of IaC and using this to deploy and integrate services on Cloud. Hands on experience in using and integrating with AWS Services such as EC2, EKS, Fargate, IAM, S3, Lambda. Experience using the AWS SDK (Boto3) to automate integration tasks. Experience or understanding integrating hybrid-cloud application deployments. Understanding of CloudTrail to debug and diagnose integration issues. We would love to hear from you if you have any of the following Qualifications or Certifications: Linux Admin, (RHCSA) or (RHCE). Microsoft Certified: Windows Server Hybrid Administrator Associate. Red Hat Certified Specialist in Ansible Automation (EX407). Terraform Associate certification. AWS Certification. CCNA Certification. Oracle Java Certification. ISTQB Certification. OSCP Certification. Disclaimer: This vacancy is being advertised by Optamor Limited. Optamor is a specialist Recruitment Process Outsourcing provider. We provide a flexible full recruitment solution which takes care of all recruitment requirements from planning to on-boarding. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission.
May 01, 2026
Full time
DevSecOps Engineer Brockworth, Gloucester, Gloucestershire, South West UK 35044 - 86100 plus BUPA, benefits and bonus 37.5 hours + 4 Day Work Week option Lockheed Martin Rotary and Mission Systems (RMS) provides systems engineering, software development, training solutions and complex program management for global security, civil and commercial markets. Simply stated, our mission is to be the world's leading global security and aerospace company. The role: We are seeking DevSecOps Engineers at a variety of levels of seniority. Join Our Team as an DevSecOps Engineer (with a Focus on Infrastructure Engineering). You'll play a pivotal role in integrating, administering and securing a range of systems and applications, with a strong focus on designing, building, and maintaining scalable, reliable, and secure infrastructure. As an Engineer within our DevSecOps team, you'll be at the forefront of driving innovation and safeguarding digital infrastructures by ensuring robust, high-performance systems that support our mission-critical solutions. You'll need to have an understanding of Windows and Linux systems and DevSecOps principles and experience of working within a multi-disciplined team. Knowledge and understanding of core software tools, methods, and frameworks to reliably integrate and deploy, integrate, and test features into environments to ensure optimum outcomes for our customers. Additionally, we're looking for candidates with hands-on experience in infrastructure engineering, including expertise in areas such as cloud architecture, containerization (e.g., Docker, Kubernetes), infrastructure-as-code (e.g., Terraform, Ansible), and system performance optimization to support seamless integration and testing processes. Key Responsibilities: Design, build, deploy and manage a broad set of IT Infrastructure aligning to customer needs and requirements, while leveraging infrastructure engineering best practices to maintain system reliability and scalability with a focus on automation and repeatability. Develop Infrastructure as Code and scripts and integrate those with CI/CD pipelines and a wider ecosystem of tools, prioritising automation to streamline deployments. Provide full end to end systems lifecycle management covering architecture, design, deployment and support through to decommissioning and migration. Support the integration and delivery of large and complex solutions into a wider system-of-systems, ensuring infrastructure components are robust and interoperable. Opportunities to experience the cloud by undertaking deployments in Public, Private, and Hybrid Cloud environments, addressing potential constraints while optimizing infrastructure performance and security. If you're passionate about DevSecOps, with a strong focus and background in Infrastructure Engineering, and eager to take your career to the next level, we want to hear from you! Apply now to join our team and embark on an exciting journey of innovation and growth. Required skills, qualifications and experience : Advanced understanding of DevSecOps. The ability to work within an agile environment and delivering using Scrum and Sprints utilising tools such as Jira and Confluence to help planning and collaboration. Expert in Windows and Linux systems administration (Active Directory etc). Expert in Virtualisation technologies and concepts - VMware vsphere, ARIA Ops performance monitoring, software defined networking - NSX. Advanced understanding of Web proxy servers and configuration - Squid. Experience of Automation technologies Terraform and Ansible for complex builds, Packer. Experience of CI/CD pipeline builds - Jenkins. Understanding of Git/Bitbucket/GitLab integration, coding and branching strategies. Proficient in the use and administration of Containerisation technologies - Kubernetes, Docker. Proficient in Powershell, bash scripting. Proficient in Python. Proficient in the use of Networking skills - IPv4 addressing and routing. Experience of Logging and monitoring using Zabbix and Splunk. Experience of Cloud and AWS concepts and technologies. Desired Skills: Ability to support maturation of automated CI/CD software pipelines for Cloud deployments. Understanding of IaC and using this to deploy and integrate services on Cloud. Hands on experience in using and integrating with AWS Services such as EC2, EKS, Fargate, IAM, S3, Lambda. Experience using the AWS SDK (Boto3) to automate integration tasks. Experience or understanding integrating hybrid-cloud application deployments. Understanding of CloudTrail to debug and diagnose integration issues. We would love to hear from you if you have any of the following Qualifications or Certifications: Linux Admin, (RHCSA) or (RHCE). Microsoft Certified: Windows Server Hybrid Administrator Associate. Red Hat Certified Specialist in Ansible Automation (EX407). Terraform Associate certification. AWS Certification. CCNA Certification. Oracle Java Certification. ISTQB Certification. OSCP Certification. Disclaimer: This vacancy is being advertised by Optamor Limited. Optamor is a specialist Recruitment Process Outsourcing provider. We provide a flexible full recruitment solution which takes care of all recruitment requirements from planning to on-boarding. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission.
Pontoon is an employment consultancy. We put expertise, energy, and enthusiasm into improving everyone's chance of being part of the workplace. We respect and appreciate people of all ethnicities, generations, religious beliefs, sexual orientations, gender identities, and more. We do this by showcasing their talents, skills, and unique experience in an inclusive environment that helps them thrive. Are you an innovative Endpoint Security Engineer looking for an exciting opportunity to enhance global security operations? Join our client's dynamic team, where your expertise will help shape the future of endpoint security! Role: Endpoint Security Engineer Duration: 12 Months (extension Options) Location: Chester (Hybrid 3 days in Office) Rate: 550 per day (umbrella) Why Join Us? At our organization, we believe in fostering a collaborative environment where creativity and security go hand in hand. You'll work alongside dedicated professionals who are passionate about protecting digital assets while supporting cloud migration initiatives. Key Responsibilities: Drive Cloud Migration: Contribute to a major cloud migration program, ensuring seamless transitions and robust security measures. Engineer Security Solutions: Design, implement, and support cutting-edge endpoint security solutions using Trellix, BeyondTrust, and CrowdStrike. Deploy Solutions: Utilize ITSM systems like Remedy and ServiceNow for effective enterprise security deployments. Documentation & Workflows: Produce high-quality technical documentation, workflows, and support materials to guide best practices. Collaborate & Optimize: Partner with security vendor consultants and Technical Account Managers to maximize product performance. Align Compliance Standards: Work closely with compliance, audit, and information security teams to maintain organizational standards. Research & Consultancy: Conduct thorough research and provide informed consultancy on the latest security solutions and trends. Manage Configurations: Define and maintain security baseline configurations, ensuring the highest standards are met. Rapid Response: Address operational issues promptly and efficiently, adapting to a fast-paced global environment. Required Technical Skills & Certifications: Proven experience in endpoint security, with a strong background in both engineering and support roles. Expertise in Application Control, particularly with BeyondTrust solutions. Proficient in scripting with PowerShell and Python-essential skills for this role! Familiarity with Trellix ePO, BeyondTrust EPM Cloud, and policy management in Azure and AWS. Advanced knowledge of Microsoft Windows operating systems. Strong analytical and problem-solving skills to tackle complex security challenges. Exposure to data analytics tools like Splunk and Power BI. Essential Skills: Excellent workflow management, communication, and interpersonal abilities. Experience with EPM Cloud Migration (this role focuses on EPM, not IAM ). Ability to create clear and effective documentation, including diagrams and technical architecture. Knowledge of governance, risk management, and administrative oversight of workstreams. Quick learner with a knack for sharing knowledge and applying research-driven solutions. Proven ability to thrive under pressure and respond swiftly to emerging challenges. Experience collaborating with architecture and engineering teams on Windows platform design. Desired Skills: Understanding of cloud technologies, especially Azure and AWS. Security certifications, preferably CISSP. Experience supporting macOS/iOS environments would be a plus! What's Next? If you're ready to take your career to the next level and make a significant impact in the world of endpoint security, we want to hear from you! Apply today to join our dedicated team and help shape the future of security! Apply Now! Let's secure the digital future together! Candidates will ideally show evidence of the above in their CV in order to be considered. Please be advised if you haven't heard from us within 48 hours then unfortunately your application has not been successful on this occasion, we may however keep your details on file for any suitable future vacancies and contact you accordingly. Pontoon is an employment consultancy and operates as an equal opportunities employer.
Apr 30, 2026
Contractor
Pontoon is an employment consultancy. We put expertise, energy, and enthusiasm into improving everyone's chance of being part of the workplace. We respect and appreciate people of all ethnicities, generations, religious beliefs, sexual orientations, gender identities, and more. We do this by showcasing their talents, skills, and unique experience in an inclusive environment that helps them thrive. Are you an innovative Endpoint Security Engineer looking for an exciting opportunity to enhance global security operations? Join our client's dynamic team, where your expertise will help shape the future of endpoint security! Role: Endpoint Security Engineer Duration: 12 Months (extension Options) Location: Chester (Hybrid 3 days in Office) Rate: 550 per day (umbrella) Why Join Us? At our organization, we believe in fostering a collaborative environment where creativity and security go hand in hand. You'll work alongside dedicated professionals who are passionate about protecting digital assets while supporting cloud migration initiatives. Key Responsibilities: Drive Cloud Migration: Contribute to a major cloud migration program, ensuring seamless transitions and robust security measures. Engineer Security Solutions: Design, implement, and support cutting-edge endpoint security solutions using Trellix, BeyondTrust, and CrowdStrike. Deploy Solutions: Utilize ITSM systems like Remedy and ServiceNow for effective enterprise security deployments. Documentation & Workflows: Produce high-quality technical documentation, workflows, and support materials to guide best practices. Collaborate & Optimize: Partner with security vendor consultants and Technical Account Managers to maximize product performance. Align Compliance Standards: Work closely with compliance, audit, and information security teams to maintain organizational standards. Research & Consultancy: Conduct thorough research and provide informed consultancy on the latest security solutions and trends. Manage Configurations: Define and maintain security baseline configurations, ensuring the highest standards are met. Rapid Response: Address operational issues promptly and efficiently, adapting to a fast-paced global environment. Required Technical Skills & Certifications: Proven experience in endpoint security, with a strong background in both engineering and support roles. Expertise in Application Control, particularly with BeyondTrust solutions. Proficient in scripting with PowerShell and Python-essential skills for this role! Familiarity with Trellix ePO, BeyondTrust EPM Cloud, and policy management in Azure and AWS. Advanced knowledge of Microsoft Windows operating systems. Strong analytical and problem-solving skills to tackle complex security challenges. Exposure to data analytics tools like Splunk and Power BI. Essential Skills: Excellent workflow management, communication, and interpersonal abilities. Experience with EPM Cloud Migration (this role focuses on EPM, not IAM ). Ability to create clear and effective documentation, including diagrams and technical architecture. Knowledge of governance, risk management, and administrative oversight of workstreams. Quick learner with a knack for sharing knowledge and applying research-driven solutions. Proven ability to thrive under pressure and respond swiftly to emerging challenges. Experience collaborating with architecture and engineering teams on Windows platform design. Desired Skills: Understanding of cloud technologies, especially Azure and AWS. Security certifications, preferably CISSP. Experience supporting macOS/iOS environments would be a plus! What's Next? If you're ready to take your career to the next level and make a significant impact in the world of endpoint security, we want to hear from you! Apply today to join our dedicated team and help shape the future of security! Apply Now! Let's secure the digital future together! Candidates will ideally show evidence of the above in their CV in order to be considered. Please be advised if you haven't heard from us within 48 hours then unfortunately your application has not been successful on this occasion, we may however keep your details on file for any suitable future vacancies and contact you accordingly. Pontoon is an employment consultancy and operates as an equal opportunities employer.
Cyber Solution Architect (Digital Platforms & Trading Systems) 8-Month contract - Inside IR35 - market rate London based - hybrid working - 3 days a week onsite Must have Base Metals trading experience Role Overview We are looking for a hands-on, highly technical Cyber Solution Architect to design and deliver secure solutions across our digital platform ecosystem, with a strong focus on Base Metals Order Execution Management Systems (OEMS). This role requires deep technical expertise, practical implementation capability, and the ability to embed security into complex, low-latency trading environments. Key Responsibilities Design and implement secure, scalable cyber solutions for digital platforms, including OEMS and associated trading infrastructure. Act as a hands-on architect, contributing directly to solution design, engineering decisions, and security implementation. Develop and maintain security architecture patterns, reference models, and solution blueprints. Lead security design for Base Metals OEMS platforms, ensuring alignment with performance, resilience, and regulatory requirements. Perform threat modelling, security risk assessments, and architecture reviews. Integrate security into DevOps pipelines, promoting DevSecOps best practices. Collaborate with engineering, infrastructure, and business teams to ensure security is embedded by design. Provide technical oversight on identity and access management (IAM), encryption, API security, and network security. Evaluate and implement security tooling (e.g., SIEM, EDR, DLP, WAF) within platform environments. Support incident response activities and provide expert guidance on security incidents affecting trading systems. Required Skills & Experience Proven experience in a Cyber Solution Architect role with strong hands-on delivery capability. Deep technical knowledge across application, infrastructure, network, and cloud security domains. Demonstrated experience securing digital platforms in complex enterprise environments. Strong understanding of Order Execution Management Systems (OEMS), ideally within Base Metals or commodities trading. Experience in commodities or financial trading environments (particularly Base Metals). Understanding of regulatory requirements relevant to trading systems. Knowledge of trading workflows, low-latency systems, and associated cyber risks. Experience with cloud platforms (AWS, Azure, or GCP) and cloud-native security architecture. Strong familiarity with security frameworks (e.g., NIST, ISO 27001, CIS). Experience implementing security controls including IAM, encryption, endpoint protection, and monitoring solutions. Proficiency in scripting or programming (e.g., Python, PowerShell, Bash). Desirable Skills Experience with high-frequency or algorithmic trading security. Knowledge of Zero Trust architecture and modern identity frameworks. Relevant certifications such as CISSP, CCSP, or TOGAF. Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.
Apr 30, 2026
Contractor
Cyber Solution Architect (Digital Platforms & Trading Systems) 8-Month contract - Inside IR35 - market rate London based - hybrid working - 3 days a week onsite Must have Base Metals trading experience Role Overview We are looking for a hands-on, highly technical Cyber Solution Architect to design and deliver secure solutions across our digital platform ecosystem, with a strong focus on Base Metals Order Execution Management Systems (OEMS). This role requires deep technical expertise, practical implementation capability, and the ability to embed security into complex, low-latency trading environments. Key Responsibilities Design and implement secure, scalable cyber solutions for digital platforms, including OEMS and associated trading infrastructure. Act as a hands-on architect, contributing directly to solution design, engineering decisions, and security implementation. Develop and maintain security architecture patterns, reference models, and solution blueprints. Lead security design for Base Metals OEMS platforms, ensuring alignment with performance, resilience, and regulatory requirements. Perform threat modelling, security risk assessments, and architecture reviews. Integrate security into DevOps pipelines, promoting DevSecOps best practices. Collaborate with engineering, infrastructure, and business teams to ensure security is embedded by design. Provide technical oversight on identity and access management (IAM), encryption, API security, and network security. Evaluate and implement security tooling (e.g., SIEM, EDR, DLP, WAF) within platform environments. Support incident response activities and provide expert guidance on security incidents affecting trading systems. Required Skills & Experience Proven experience in a Cyber Solution Architect role with strong hands-on delivery capability. Deep technical knowledge across application, infrastructure, network, and cloud security domains. Demonstrated experience securing digital platforms in complex enterprise environments. Strong understanding of Order Execution Management Systems (OEMS), ideally within Base Metals or commodities trading. Experience in commodities or financial trading environments (particularly Base Metals). Understanding of regulatory requirements relevant to trading systems. Knowledge of trading workflows, low-latency systems, and associated cyber risks. Experience with cloud platforms (AWS, Azure, or GCP) and cloud-native security architecture. Strong familiarity with security frameworks (e.g., NIST, ISO 27001, CIS). Experience implementing security controls including IAM, encryption, endpoint protection, and monitoring solutions. Proficiency in scripting or programming (e.g., Python, PowerShell, Bash). Desirable Skills Experience with high-frequency or algorithmic trading security. Knowledge of Zero Trust architecture and modern identity frameworks. Relevant certifications such as CISSP, CCSP, or TOGAF. Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.
Software Engineer Gloucester, Gloucestershire 43000 - 98000 p/a with BUPA, bonus and full benefits 4 Day Work Week options Lockheed Martin Rotary and Mission Systems (RMS) provides systems engineering, software development, training solutions and complex program management for global security, civil and commercial markets. We have exciting opportunities at varying seniority levels, arising at our site in Gloucester for Software Engineers, primarily a variety of Defence, Cyber and Intelligence programmes. Typically, you will be involved in one or more of the following: Conducting software development activities under the direction of your Software Engineering Lead. Design and development of tests to debug software. Working with customer requirements that are to be programmed into business/mission applications, whilst utilising the appropriates standards, processes and tools throughout the entire development lifecycle. Correction of program errors. Preparation of operating instructions. Documentation of program development. Analysis of system capabilities to resolve questions of program intent, output requirements, input data acquisition, programming techniques, and controls. Championing automation in the form of IaC, CI/CD and test automation. As a Software Engineer, you'll play a pivotal role in developing cutting edge DevSecOps software systems and applications. You'll be at the forefront of driving innovation and safeguarding digital infrastructures in the UK. What skills will I need? Proficient in current Java, knowledge of other languages such as Python, C++, JavaScript, TypeScript, React is a bonus. Experience of developing on Linux. Appreciation of mocking and unit testing frameworks such as JUnit 5.x (Jupiter). Experienced with Git version control. Knowledge of Agile Development using SCRUM. Understanding of Oracle/ Relational Databases and/or Mongo. Understanding of GitLab CI/CD Pipelines. Proficiency in the use of Atlassian Suite - Bitbucket, Jira, Confluence. Understanding of Elasticsearch and Kibana. Understanding of Hibernate. Desired Skills: Knowledge of developing software for cloud deployment - specifically AWS. Developing software for microservice and or serverless architectures. Understanding of CI/CD software pipelines for Cloud deployments. Understanding the development challenges moving on-prem workload to cloud. Understanding of AWS Services such as EC2, EKS, Fargate, IAM, S3, Lambda. We would love to hear from you if you have any of the following Qualifications or Certifications: These are useful but not strictly necessary. Oracle Java Certification. AWS Certification. ISTQB Certification. OSCP Certification. CCNA Certification. Disclaimer: This vacancy is being advertised by Optamor Limited. Optamor is a specialist Recruitment Process Outsourcing provider. We provide a flexible full recruitment solution which takes care of all recruitment requirements from planning to on-boarding. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission.
Apr 30, 2026
Full time
Software Engineer Gloucester, Gloucestershire 43000 - 98000 p/a with BUPA, bonus and full benefits 4 Day Work Week options Lockheed Martin Rotary and Mission Systems (RMS) provides systems engineering, software development, training solutions and complex program management for global security, civil and commercial markets. We have exciting opportunities at varying seniority levels, arising at our site in Gloucester for Software Engineers, primarily a variety of Defence, Cyber and Intelligence programmes. Typically, you will be involved in one or more of the following: Conducting software development activities under the direction of your Software Engineering Lead. Design and development of tests to debug software. Working with customer requirements that are to be programmed into business/mission applications, whilst utilising the appropriates standards, processes and tools throughout the entire development lifecycle. Correction of program errors. Preparation of operating instructions. Documentation of program development. Analysis of system capabilities to resolve questions of program intent, output requirements, input data acquisition, programming techniques, and controls. Championing automation in the form of IaC, CI/CD and test automation. As a Software Engineer, you'll play a pivotal role in developing cutting edge DevSecOps software systems and applications. You'll be at the forefront of driving innovation and safeguarding digital infrastructures in the UK. What skills will I need? Proficient in current Java, knowledge of other languages such as Python, C++, JavaScript, TypeScript, React is a bonus. Experience of developing on Linux. Appreciation of mocking and unit testing frameworks such as JUnit 5.x (Jupiter). Experienced with Git version control. Knowledge of Agile Development using SCRUM. Understanding of Oracle/ Relational Databases and/or Mongo. Understanding of GitLab CI/CD Pipelines. Proficiency in the use of Atlassian Suite - Bitbucket, Jira, Confluence. Understanding of Elasticsearch and Kibana. Understanding of Hibernate. Desired Skills: Knowledge of developing software for cloud deployment - specifically AWS. Developing software for microservice and or serverless architectures. Understanding of CI/CD software pipelines for Cloud deployments. Understanding the development challenges moving on-prem workload to cloud. Understanding of AWS Services such as EC2, EKS, Fargate, IAM, S3, Lambda. We would love to hear from you if you have any of the following Qualifications or Certifications: These are useful but not strictly necessary. Oracle Java Certification. AWS Certification. ISTQB Certification. OSCP Certification. CCNA Certification. Disclaimer: This vacancy is being advertised by Optamor Limited. Optamor is a specialist Recruitment Process Outsourcing provider. We provide a flexible full recruitment solution which takes care of all recruitment requirements from planning to on-boarding. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission.
