Senior Security Engineer (Identity, Endpoint, Zero Trust & DLP)

About the role

A workplace security engineer is sought to design, implement and continuously improve corporate security controls across identity, endpoint, network access (VPN/ZTNA) and data protection. The role is the technical owner of key security platforms and works with IT, Cloud and Compliance teams to meet financial industry security requirements.

Key responsibilities

• Identity and access: own secure identity architecture across Google Workspace and AWS IAM Identity Center, including group/role models, least privilege, SSO (SAML/OAuth), MFA and conditional access, and onboarding of new SaaS apps.
• Zero trust and remote access: own and optimise remote access and ZTNA/SASE via Prisma Access, Prisma ZTNA/SASE and Google BeyondCorp, working with network teams on policy, segmentation and logging.
• Endpoint security: define baselines and compliance with Jamf Pro, Apple Business Manager, Google Endpoint Management and Palo Alto Cortex XDR, covering encryption, OS baseline, EDR coverage and hardening.
• Data protection: design and tune Google Workspace DLP and Prisma Cloud DLP, including classification patterns and reduction of risky exfiltration.
• Vulnerability and patch governance: triage scan results, risk ratings, remediation tracking, patch SLAs and reporting.
• Monitoring, incident response and improvement: improve alerting and detection, lead escalated incident investigations and produce runbooks and control changes.
• Automation and tooling: build custom tools, scripts and API integrations, and automate tasks and incident response with SOAR tools or Python/Go.
• Documentation and audit readiness: build security standards, runbooks and audit evidence pipelines.

Required profile

• 5+ years in security engineering or IT security with strong hands-on implementation experience.
• Deep experience in at least two of: IAM/SSO, endpoint security, zero trust/VPN/SASE, DLP engineering, or audit support in regulated environments.
• Nice to have: scripting/automation mindset, IaC mindset, operational excellence, and relevant certifications such as Palo Alto, Jamf, Google Workspace admin or AWS security.

Required skills

• Proficiency in at least one scripting language (Python, Go or PowerShell/Bash) with a track record of building tools.
• Solid understanding of RESTful APIs, JSON/YAML and Git.
• Strong troubleshooting across Windows/macOS and solid networking fundamentals.
• Experience with Terraform applied to security architecture is a strong plus.