Information Security Indentity Engineer

Cantor Fitzgerald’s Global Information Security team is seeking a proactive Junior Information Security Engineer to join our fast-paced environment in London. You will plan, coordinate, and execute IAM initiatives across cloud and on-premise platforms, partner with DevSecOps, support incident response, and ensure compliance with industry standards while continuously improving documentation and automation.

Responsibilities

• Design, implement, and maintain authentication systems (LDAP, AD, Kubernetes, Microsoft Entra) using OIDC, OAuth, and SAML protocols.
• Manage privileged access solutions (CyberArk, Keeper) and identity governance platforms (SailPoint, IBM, Oracle).
• Integrate IAM controls into DevSecOps CI/CD pipelines and automate workflows with AI/automation tools.
• Define and enforce IAM policies across AWS, Azure, and GCP cloud environments.
• Document configurations, standards, and procedures in centralized repositories and maintain run-books.
• Support global incident response, including tabletop exercises and post-mortem analysis.
• Provide evidentiary support and remediation tracking for audit, compliance, and risk assessments.
• Advise project teams, application owners, and infrastructure services on security controls and best practices.
• Monitor security metrics, generate reports, and act as regional IAM incident response point of contact.
• Utilize service, incident, and change management tools (ServiceNow, Dynamics 365) to track and resolve issues.

Qualifications

• Bachelor’s degree or equivalent experience; 3-5 years IAM experience in financial services.
• Hands-on experience with Microsoft Entra, Okta, Ping One, Auth0, and authentication protocols (OAuth, OIDC, SAML).
• Proven work with PAM solutions (CyberArk, Keeper) and remote-desktop security tools.
• Deployment and administration of IGA platforms such as SailPoint, Saviynt, or Oracle.
• Strong scripting/automation skills (PowerShell, Python) and API integration experience.
• Familiarity with ticketing and PMO tools (ServiceNow, Dynamics 365, Smartsheet, Monday.com).
• Knowledge of cloud IAM across AWS, Azure, GCP and related security services.
• Experience with SIEM/SOAR (Splunk, PAN Cortex) and firewall technologies (Palo Alto, F5) is a plus.
• Excellent communication, documentation, and cross-team collaboration abilities.
• Proactive, detail-oriented, able to manage multiple priorities in a fast-paced environment.