Identity & Privileged Access Engineering Lead

Senior Identity & Privileged Access Engineering Lead

Location: London (Onsite)

TC: Competitive + Performance Bonus (Hedge Fund Level Compensation)

Some IAM roles focus on administration. This one is about removing privilege at the source and rebuilding identity security as infrastructure.

A highly sophisticated trading environment is seeking a Senior Identity & Privileged Access Engineering Lead to design, build, and operate a modern identity security function across enterprise, cloud, and workload environments.

This is not a traditional IAM role — it requires a hands-on engineer who understands identity as the foundation of security, not just a control layer.

You will take ownership of privileged access architecture, authentication systems, and identity governance across a complex, high-performance environment where access control is mission-critical.

The Role

• Design and operate enterprise identity security across Microsoft Entra ID
• Lead the implementation of Conditional Access, MFA, and phishing-resistant authentication
• Own and evolve Privileged Access Management (PIM, JIT, admin tiering, break-glass controls)
• Eliminate standing privilege across cloud and enterprise systems
• Build and automate identity lifecycle processes (joiner/mover/leaver)
• Design and enforce secure access patterns across users, services, and infrastructure
• Partner with cloud and platform teams to integrate identity controls into Azure and Kubernetes environments
• Tune identity-based security detections with SOC and security engineering teams
• Drive continuous improvement in identity governance, access reviews, and compliance alignment

Non-Negotiables (DO NOT APPLY IF YOU DON’T HAVE...)

• Strong hands-on experience with Microsoft Entra ID (Azure AD)
• Deep understanding of Privileged Access Management (PIM, JIT, admin tiering, break-glass design)
• Proven experience designing and enforcing Conditional Access and MFA policies at scale
• Practical experience with identity lifecycle automation and governance (JML, RBAC, access reviews)
• Strong scripting / automation capability (PowerShell, Microsoft Graph, or similar)
• Experience operating in enterprise-scale or highly regulated environments (financial services preferred)

Why This Role

This is a rare opportunity to own and rebuild identity and privileged access security within a high-performance, security-critical environment.

You won’t be maintaining IAM systems - you’ll be engineering the controls that define how access works across the entire organisation .

For the right person, this is a chance to shape privileged access architecture at scale in one of the most demanding security environments in the industry.