Security engineer in identity and access

Technology is at the heart of everything we do at CFC. We’re looking for a Lead Security Engineer to shape and deliver security across our networks, devices, identity and access environment. This is a senior individual-contributor role for an engineer who combines strong technical judgement with sustained, hands-on delivery. You’ll solve complex, cross-functional security challenges, turning requirements and identified risks into practical, effective controls.

• Design, implement and operate highly automated security governance and controls across network, device, identity and access systems.
• Architect reusable security services for enterprise systems, integrating governance, protection, detection, response and recovery capabilities.
• Design and implement access controls for human and non-human identities, including service and agentic AI identities.
• Strengthen authentication, authorisation, secrets management, audit and privilege segmentation across systems and services.
• Implement scalable access-control models and access policy-as-code, enabling teams to provision access consistently and securely.
• Embed security governance and controls into code, cloud and AI architectures, including network segmentation and identity controls.
• Diagnose and remediate identity, infrastructure and access-control weaknesses, identifying root causes and implementing controls that prevent recurrence.
• Lead cross-functional security design and threat-modelling activities, translating risks into layered and prioritised engineering improvements.
• Automate security policies and guardrails across workflows and endpoints, including the appropriate use of AI augmentation.
• Act as a technical authority for network, device and identity security, advising technology teams on complex architecture and access-control decisions.

• Deep experience designing and engineering security across enterprise networks, devices, identity and access.
• A strong understanding of network segmentation, identity controls and security architecture across cloud systems.
• Hands-on experience implementing identity and access management and privileged-access controls across enterprise identity platforms.
• Strong knowledge of authentication, authorisation, secrets management, audit, least privilege and privilege segmentation.
• Experience designing access for human and non-human identities, including addressing excessive permissions, exposed secrets and access-governance weaknesses.
• Experience implementing role-based or attribute-based access control, automated policy enforcement or access policy-as-code at scale.
• The ability to create effective security architectures and navigate trade-offs between security, accessibility, decentralisation and performance.
• The ability to automate controls through code, policy and workflow automation.
• Strong technical judgement, with the ability to influence cross-functional technology teams through clear and credible architectural reasoning.

• Условий в вакансии нет