About the Company

Our client is a global financial technology company focused on building innovative technology and infrastructure for both enterprise and consumer markets.

The company provides advanced platforms and solutions that help businesses launch, operate, and scale financial technology services in a rapidly evolving global market. Its business covers both B2C and B2B services, with a strong focus on technology innovation, system performance, security, and scalability.

About the Opportunity

We are looking for an Enterprise Security Engineer to manage and secure the company’s enterprise identity, access management, endpoint, and cloud security infrastructure. This role will focus on protecting enterprise systems, managing user identities, securing access to corporate resources, and improving the overall enterprise security architecture.

Responsibilities

Enterprise Security Architecture & Strategy

• Develop a thorough understanding of the company’s IT environment and information systems landscape.

• Lead security solution design for enterprise IT systems, identify gaps in the existing security architecture, and recommend improvements.

• Document and establish enterprise security architecture across Windows, macOS, Linux, and mobile environments.

• Collaborate with application and infrastructure owners to define security integration initiatives across internal and external systems.

• Plan architectural improvements and provide security guidance to developers, engineers, and analysts.

• Apply risk-based thinking to help teams make informed security decisions and prioritize security initiatives effectively.

Identity & Access Management

• Support and maintain identity and access management technologies, including single sign-on, multi-factor authentication, and user lifecycle management.

• Manage the end-to-end user account lifecycle, including account provisioning, access control, access reviews, and account deactivation.

• Ensure access permissions follow least-privilege principles.

• Implement and manage role-based access control strategies and integrations across enterprise applications.

• Conduct regular access reviews and certification exercises to support security and compliance requirements.

• Implement and manage privileged access management solutions for administrative and service accounts.

Endpoint Security

• Deploy, administer, and maintain endpoint security tools, including mobile device management and endpoint detection and response solutions.

• Manage security configurations for enterprise productivity tools, including data loss prevention, access controls, and email security policies.

• Support the security hardening and protection of Windows, macOS, Linux, and mobile devices.

Cloud & AWS Security

• Secure cloud infrastructure services, including IAM policies, security groups, virtual private clouds, and network access controls.

• Implement cloud security best practices for logging, monitoring, and alerting using services such as AWS CloudTrail, GuardDuty, and Security Hub.

• Enforce least-privilege access principles across cloud environments and regularly review access permissions.

• Support cloud workload protection, encryption key management, and secure configuration baselines.

• Support multi-account cloud governance and security controls using services such as AWS Control Tower, AWS Organizations, and Service Control Policies.

Requirements

• At least five years of experience in enterprise security, infrastructure security, or endpoint security.

• At least three years of experience in AWS or cloud security-related roles.

• Experience supporting enterprise applications, including architecture, implementation, operations, and troubleshooting.

• Hands-on experience with identity and access management administration.

• Experience with SAML and OIDC integrations.

• Familiarity with Google Workspace administration and security capabilities.

• Knowledge of Windows, macOS, and Linux system administration and security hardening.

• Experience with privileged access management solutions.

• Experience with mobile device management platforms.

Nice to Have

• Proficiency in scripting and automation using Bash, PowerShell, or Python.

• Experience with Identity Governance and Administration platforms.

• Knowledge of Zero Trust architecture principles.

• Experience with SCIM provisioning and identity automation.

• Experience implementing conditional access policies and risk-based authentication.

• Experience in financial technology, digital assets, blockchain, or other highly regulated technology environments.

• Relevant certifications such as CISSP, CEH, AWS Certified Security – Specialty, or equivalent.