Lead Identity Security Engineer

S&P Global

Hybrid
Identity and access management (iam)
Non-human identity (nhi) strategy
Secrets management platforms
The candidate will drive the transformation of our security posture by eliminating static credentials and enforcing least-privilege for machine identities

Job Summary

  • The candidate will drive the transformation of our security posture by eliminating static credentials and enforcing least-privilege for machine identities.
  • As a Lead Engineer within the IAM team, you will pioneer the 'Identity of Things' for a global enterprise, working with cutting-edge technologies like SPIFFE/SPIRE and OIDC Federation.
  • We provide comprehensive benefits including health and wellness coverage, flexible downtime, continuous learning resources, and family-friendly perks to support your career and personal growth.

Matching Summary

The candidate will drive the transformation of our security posture by eliminating static credentials and enforcing least-privilege for machine identities.

Skills & Requirements

Must-have

  • Identity and Access Management (IAM)
  • Non-Human Identity (NHI) strategy
  • Secrets Management platforms
  • Hybrid Cloud security (AWS, Azure)
  • Machine-to-Machine (M2M) authentication
  • Zero Trust security principles
  • OAuth 2.0 and OIDC protocols

Nice-to-have

  • Cross-functional collaboration
  • Technical leadership and influence
  • Dynamic, short-lived credential models
  • Experience with SPIFFE/SPIRE
  • Governance and compliance enforcement
  • Enterprise-wide security transformation
  • Continuous learning culture

Key Requirements

  • 3+ years professional IAM experience
  • Experience with HashiCorp Vault or equivalents
  • Proficiency in OAuth 2.0 Client Credentials Flow
  • Knowledge of mTLS and JWT structures
  • Experience securing AWS, Azure, and SaaS platforms

Work Rights

Not specified

Tailored Resume

Cover Letter