Security Engineer - Identity, Privileged Access & Secrets Management

The role

This Security Engineer will shape and deliver Identity Governance, Privileged Access Management, and Secrets Management capabilities. You will design and implement solutions for identity lifecycle management, authentication, and secrets management across on-premises and cloud environments.

What you will do

• Own and continuously improve IGA, PAM, and Secrets Management capabilities.
• Build relationships with Infrastructure, Engineering, HR, and business stakeholders.
• Lead identity and access initiatives from conception through to delivery.
• Design and implement solutions for identity lifecycle management, privileged access, authentication, and secrets management.
• Design and implement role-based access control models and policies within the IGA Tool.
• Support uplift and maintenance of Active Directory groups.
• Integrate secrets management platforms with CI/CD pipelines, cloud services, and enterprise applications.
• Develop automation and Infrastructure-as-Code / Identity-as-Code solutions.
• Provide guidance on IAM principles, governance models, standards, and best practices.
• Support access reviews, audits, investigations, and risk management activities.

Required qualifications

• 5-10 years' experience in Identity & Access Management, Security Engineering, or a related discipline.
• Strong understanding of Identity and Access Management principles, methodologies, governance, and operating models.
• Experience delivering IGA, PAM, and Secrets Management capabilities in complex enterprise environments.
• Experience working across both on-premises and cloud environments.
• Hands-on engineering experience implementing, integrating, and automating security technologies.
• Ability to engage effectively with both technical and non-technical stakeholders.
• Proven ability to take ownership, drive initiatives, and deliver outcomes with minimal supervision.
• Strong understanding of identity lifecycle management, least privilege, RBAC, access governance, authentication, and privileged access management.
• Strong hands-on experience with platforms such as SailPoint (ISC), Delinea, CyberArk, HashiCorp Vault, or similar technologies.
• Strong automation-first mindset and experience applying Infrastructure-as-Code and Identity-as-Code practices.
• Excellent communication, stakeholder management, and problem-solving skills.

Benefits

• Initiatives and programs to enable employees achieve a healthy work-life balance.

About the company

Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager. It is a technology and data driven group implementing a scientific approach to investing.