Security Engineer - Secure by Design & Platforms

Security Platforms Engineer - IAM & PAM (Contract, Inside IR35)

Location: London (1-2 days per week in office, remainder remote)

Contract: Initial 6 months, with potential to extend

IR35 Status: Inside IR35

Our client, a large, complex enterprise organisation, is looking for a Security Platforms Engineer to join their Security Platforms & Architecture team as their first hire into a newly forming security run function. This is a genuine opportunity to help shape and scale a capability from the ground up, rather than stepping into a fully established team.

The role sits across two core areas: embedding security into technology projects at the design stage, and taking hands-on ownership of identity and access management (IAM) and privileged access management (PAM) platforms once they move from delivery into steady-state operation. You'll work in a predominantly Microsoft security environment, providing governance and advisory input on Secure by Design processes while also picking up light configuration and engineering work as solutions land in run.

What you'll be doing:

Partnering with project and delivery teams to embed secure-by-design principles from the earliest stages of a project through to go-live

Conducting security design reviews, threat modelling, and go-live readiness assessments

Taking operational ownership of IAM and PAM platforms as they're on-boarded from project delivery into business-as-usual

Managing and enhancing Microsoft-focused security platforms, including configuration, integration's, and day-to-day platform support

Coordinating with managed service providers and internal SecOps teams where operational responsibilities are shared

Developing security standards, guidance, and documentation to support consistent, scalable practices

What we're looking for:

Proven experience in secure-by-design delivery, architecture reviews, or security assurance within complex enterprise environments

Hands-on experience configuring or administering Microsoft security tooling, ideally spanning identity, endpoint, cloud, and monitoring

Exposure to IAM/PAM platforms and concepts (tools such as Delinea or StrongDM would be a strong plus)

Strong stakeholder mana...