Description
We are seeking a Senior Security Engineer for Identity Services at Barclays, where you will play a crucial role in securing our digital identity platform and protecting millions of customer identities across our global banking operations.
The purpose of this role is to develop, implement, and maintain solutions that support the safeguarding of the bank's systems and sensitive information.
Key responsibilities include:
- Providing subject matter expertise on security systems and engineering patterns
- Developing and implementing protocols, algorithms, and software applications to protect sensitive data and systems
- Managing and protecting secrets, ensuring they are securely generated, stored, and used
- Executing audits to monitor, identify, and assess vulnerabilities in the bank's infrastructure/software and supporting the response to potential security breaches
- Identifying advancements in cryptographic technologies and techniques to support innovation and adoption
- Collaborating across the bank, including developers and security teams, to ensure cryptographic solutions align with business objectives, security policies, and regulatory requirements
- Developing, implementing, and maintaining Identity and Access Management solutions and systems
As a Vice President, you will be expected to contribute to or set strategy, drive requirements, and make recommendations for change. You will plan resources, budgets, and policies, manage and maintain policies/processes, deliver continuous improvements, and escalate breaches of policies/procedures.
To be successful in this role, you should have:
- Solid experience in security engineering with deep expertise in Identity and Access Management security, including authentication protocols, authorisation frameworks, and identity federation security
- Strong knowledge of security protocols and standards, including OAuth2, OIDC, SAML, PKI, and PSD2 SCA
- Proven expertise in threat modelling, security architecture reviews, penetration testing, and vulnerability assessments specifically for IAM systems and APIs
- Experience with AWS security services and cloud security best practices, including IAM policies, security groups, encryption, HSMs, and key management
- Solid understanding of secure coding practices, security testing automation, and integration with CI/CD pipelines
Desirable skills include:
- Hands-on experience securing Ping Identity platforms (PingGateway, PingAM, PingIDM)
- Experience in using AI-assisted security scanning tools and automated security testing frameworks
- Background in incident response, security monitoring, and building threat detection capabilities for identity-related threats
- Security certifications such as CISSP, CEH, OSCP, or equivalent demonstrating deep security expertise
- Experience in financial services or regulated industries with understanding of compliance frameworks (PCI-DSS, ISO 27001, SOC 2)
- Strong stakeholder management skills with the ability to communicate security risks and recommendations to technical and non-technical audiences