Deloitte

IAM security engineer

In short

IAM Security Engineer contract role designing and implementing Identity & Access Management solutions across AWS and GCP for a Tier 1 global bank undergoing major technology transformation. Work spans cloud IAM security controls, Infrastructure as Code (Terraform, CloudFormation), CI/CD-based delivery, threat modelling and secure REST/SOAP API development. Requires 6+ years IT experience with 4+ years in cyber security, hands-on AWS/GCP experience, mandatory cloud and cyber security certifications, and Python coding skills. This is a 6-month initial contract (Inside IR35) based in London or Belfast on a hybrid basis.

Description
This is an exciting opportunity to join a leading global Tier 1 financial institution undergoing a major transformation of its technology landscape. We are seeking experienced IAM Security Engineers to join a Tier 1 Global Bank, designing and implementing secure Identity & Access Management solutions across AWS and GCP cloud platforms. This role focuses on cloud security engineering, automation, Infrastructure as Code and secure software delivery.
Responsibilities
•Collaborate with Security, Infrastructure, Engineering and Application teams to define and implement IAM roles and policies.
•Design and implement IAM security controls aligned with enterprise cloud security standards.
•Build automation and reusable libraries enabling self-service IAM provisioning.
•Deliver IAM solutions using CI/CD pipelines with automated testing and validation.
•Develop secure cloud-native IAM solutions across AWS and GCP.
•Develop and secure REST and SOAP APIs.
•Contribute to DevOps and Agile delivery practices.
Requirements
•Minimum 6 years’ IT experience, including at least 4 years within Cyber Security/Information Security.
•Minimum 3 years’ hands-on experience with AWS and/or GCP cloud-native services.
•Experience designing enterprise security solutions within Financial Services or other complex global organisations.
•Strong knowledge of cloud IAM security models.
•Experience using Infrastructure as Code tools including Terraform and CloudFormation.
•Demonstrated expertise in Threat Modelling methodologies such as STRIDE, PASTA or MITRE ATT&CK/ATLAS.
•Strong understanding of authentication, authorisation, encryption, logging & monitoring, infrastructure security and network segmentation.
•Ability to design and review secure technical architectures.
•Strong understanding of SDLC and CI/CD pipelines.
•Hands-on Python coding experience (Java or Go also considered).
•Experience with automated testing frameworks such as PyTest, Behave or JUnit.
•Experience developing secure REST and SOAP web services.
•Associate or Professional AWS or GCP Cloud Certification (mandatory).
•Associate or Professional Cyber Security Certification (mandatory).
•Excellent communication and stakeholder management.
•Strong analytical and problem-solving skills.
•Self-starter with the ability to work independently.
•Experience working within Agile and DevOps environments.
Nice to have
•CISSP, AWS Security Specialty or Google Professional Cloud Security Engineer desirable.
Conditions
•Contract Location: London/Belfast (Hybrid)
•Contract Duration: 6 months initially (with potential extension)
•Contract Start Date: Immediate
•Contract Classification: Inside IR35
•Traditional Daily Rate: £450
•Agreed Contract Rate (ACR): £346.95
•Equivalent Annual Salary: £90,206 + £10,887 holiday pay
•Payroll provider: Rockford

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot