Security Engineer - Secure by Design & Platforms

Security Platforms Engineer - IAM & PAM (Contract, Inside IR35)
Location: London (1-2 days per week in office, remainder remote)
Contract: Initial 6 months, with potential to extend
IR35 Status: Inside IR35
Our client, a large, complex enterprise organisation, is looking for a Security Platforms Engineer to join their Security Platforms & Architecture team as their first hire into a newly forming security run function. This is a genuine opportunity to help shape and scale a capability from the ground up, rather than stepping into a fully established team.
The role sits across two core areas: embedding security into technology projects at the design stage, and taking hands-on ownership of identity and access management (IAM) and privileged access management (PAM) platforms once they move from delivery into steady-state operation. You'll work in a predominantly Microsoft security environment, providing governance and advisory input on Secure by Design processes while also picking up light configuration and engineering work as solutions land in run.

What you'll be doing:

• Partnering with project and delivery teams to embed secure-by-design principles from the earliest stages of a project through to go-live
• Conducting security design reviews, threat modelling, and go-live readiness assessments
• Taking operational ownership of IAM and PAM platforms as they're on-boarded from project delivery into business-as-usual
• Managing and enhancing Microsoft-focused security platforms, including configuration, integration's, and day-to-day platform support
• Coordinating with managed service providers and internal SecOps teams where operational responsibilities are shared
• Developing security standards, guidance, and documentation to support consistent, scalable practices

What we're looking for:

• Proven experience in secure-by-design delivery, architecture reviews, or security assurance within complex enterprise environments
• Hands-on experience configuring or administering Microsoft security tooling, ideally spanning identity, endpoint, cloud, and monitoring
• Exposure to IAM/PAM platforms and concepts (tools such as Delinea or StrongDM would be a strong plus)
• Strong stakeholder management skills, comfortable working across architecture, engineering, and delivery teams
• A pragmatic, self-motivated approach, able to operate with minimal supervision and adapt as priorities shift

This is a fast-moving process with a short timeline, ideal for someone who wants to make an early, visible impact building a new function rather than joining an already established team.
To apply or find out more, contact

Guidant, Carbon60, Lorien & SRG - The Impellam Group Portfolio are acting as an Employment Business in relation to this vacancy.