Job Description

The Role: IAM Security Engineer- NextGen

Location: Sheffield, UK

Position Type: Contract Inside IR35

Remote work option Available: Hybrid – 3 Days Onsite

Job Description:

In this role, you will:

* Design and implement security controls across the IDAM 2.0 platform.

* Embed Secure by Design principles throughout solution delivery.

* Implement and maintain Zero Trust security controls.

* Implement secure service-to-service communication using mutual TLS (mTLS).

* Support Workload Identity, Human Identity and Agent Identity security controls.

* Integrate secrets management, PKI and certificate lifecycle services.

* Support cryptographic key management and certificate rotation processes.

* Conduct threat modelling and security risk assessments.

* Identify, assess and remediate security vulnerabilities.

* Implement cloud security controls for GCP resources and Kubernetes platforms.

* Contribute to DevSecOps tooling and automated security testing.

Essential Skills

* Information Security Engineering

* Identity and Access Management (IAM)

* Zero Trust Architecture

* Authentication and Authorisation

* Workload Identity

* Agent Identity

* PKI and Certificate Management

* Cryptography

* Cloud Security (GCP)

* Kubernetes Security

* Service Mesh Security

* API Security

* Policy-as-Code (OPA)

* DevSecOps

* Secure Software Development Lifecycle (SSDLC)

* Threat Modelling

* Vulnerability Management

* Incident Response