IAM Security Engineer
Contract Role: IAM Security Engineer
Contract Location: London/Belfast (Hybrid)
Contract Duration: 6 months initially (with potential extension)
Contract Start Date: Immediate
Contract Classification: Inside IR35
Daily Rate breakdown
Traditional Daily Rate: £450
Agreed Contract Rate (ACR): £346.95
Equivalent Annual Salary: £90,206 + £10,887 holiday pay
Payroll provider: Rockford Payroll Info for Contingent Workers - Rockford Pay
Overview
This is an exciting opportunity to join a leading global Tier 1 financial institution undergoing a major transformation of its technology landscape.
We are seeking experienced IAM Security Engineers to join a Tier 1 Global Bank, designing and implementing secure Identity & Access Management solutions across AWS and GCP cloud platforms. This role focuses on cloud security engineering, automation, Infrastructure as Code and secure software delivery.
Key Responsibilities
• Collaborate with Security, Infrastructure, Engineering and Application teams to define and implement IAM roles and policies.
• Design and implement IAM security controls aligned with enterprise cloud security standards.
• Build automation and reusable libraries enabling self-service IAM provisioning.
• Deliver IAM solutions using CI/CD pipelines with automated testing and validation.
• Develop secure cloud-native IAM solutions across AWS and GCP.
• Develop and secure REST and SOAP APIs.
• Contribute to DevOps and Agile delivery practices.
Essential Skills & Experience
• Minimum 6 years’ IT experience, including at least 4 years within Cyber Security/Information Security.
• Minimum 3 years’ hands-on experience with AWS and/or GCP cloud-native services.
• Experience designing enterprise security solutions within Financial Services or other complex global organisations.
• Strong knowledge of cloud IAM security models.
• Experience using Infrastructure as Code tools including Terraform and CloudFormation.
• Demonstrated expertise in Threat Modelling methodologies such as STRIDE, PASTA or MITRE ATT&CK/ATLAS.
• Strong understanding of authentication, authorisation, encryption, logging & monitoring, infrastructure security and network segmentation.
• Ability to design and review secure technical architectures.
• Strong understanding of SDLC and CI/CD pipelines.
• Hands-on Python coding experience (Java or Go also considered).
• Experience with automated testing frameworks such as PyTest, Behave or JUnit.
• Experience developing secure REST and SOAP web services.
Qualifications:
• Associate or Professional AWS or GCP Cloud Certification (mandatory).
• Associate or Professional Cyber Security Certification (mandatory).
• Excellent communication and stakeholder management.
• Strong analytical and problem-solving skills.
• Self-starter with the ability to work independently.
• Experience working within Agile and DevOps environments.
• CISSP, AWS Security Specialty or Google Professional Cloud Security Engineer desirable.