Security Engineer - Identity Access Management

Responsibilities

• Develop, implement, and maintain Identity and Access Management (IAM) solutions to safeguard bank systems and sensitive information.
• Provide subject matter expertise on security systems, engineering patterns, and cryptographic technologies.
• Manage and protect secrets, ensuring secure generation, storage, and usage.
• Execute audits to monitor, identify, and assess vulnerabilities in infrastructure and software.
• Collaborate with developers and security teams to align cryptographic solutions with business objectives and regulatory requirements.
• Design extensible IAM APIs for seamless integration with internal and external applications.

Requirements

• Hands-on IAM engineering expertise across tooling, products, protocols, and identity federation.
• Experience with single sign-on (SSO), OAuth2, OIDC, and PKI.
• Proficiency in coding with either JavaScript or Java.
• Knowledge of identity management, authentication, and authorization protocols.
• Experience implementing custom authentication trees and downstream API integrations.

Preferred Qualifications

• Experience with Ping products, including Ping Gateway, Ping AM, Ping IDM, and Ping DS.
• Ability to code Ping Gateway scripted routes and Ping AM authentication tree nodes using JavaScript.
• Knowledge of PSD2 SCA and possession-based authentication.
• Experience embedding identity-first principles into the DevSecOps lifecycle.
• Experience with threat sensors such as Threat Metrix or Bio Catch.

About the Company

Barclays is a leading global financial institution committed to excellence, integrity, and innovation. We are transforming our digital estate to build market-leading offerings with customer experience at its heart. We foster a collaborative culture where employees are empowered to challenge the status quo and drive meaningful change.