ГонконгSecurity Engineer - Identity, Privileged Access & Secrets Management
1 нед. назад
Гонконг
identity governanceprivileged access managementsecrets management
Engineering role focused on developing and improving identity governance, privileged access, and secrets management solutions within a global quantitative investment firm.
Обязанности
- Own and continuously improve QRT's IGA, PAM, and Secrets Management capabilities.
- Build strong relationships with Infrastructure, Engineering, HR, and business stakeholders to understand requirements and drive outcomes.
- Lead identity and access initiatives from conception through to delivery, influencing stakeholders and driving adoption.
- Design and implement solutions for identity lifecycle management, privileged access, authentication, and secrets management across on-premises and cloud environments.
- Design and implement role-based access control (RBAC) models and policies within the IGA Tool.
- Support uplift and maintenance of Active Directory (AD) groups to align with governance policies.
- Integrate secrets management platforms with CI/CD pipelines, cloud services, and enterprise applications.
- Develop automation and Infrastructure-as-Code / Identity-as-Code solutions to improve security, governance, and operational efficiency.
- Develop automation and integrations to improve security, governance, and operational efficiency.
- Provide guidance on IAM principles, governance models, standards, and best practices.
- Support access reviews, audits, investigations, and risk management activities.
- Act as a subject matter expert for identity-related technologies, processes, and controls.
Требования
- 5-10 years' experience in Identity & Access Management, Security Engineering, or a related discipline.
- Strong understanding of Identity and Access Management principles, methodologies, governance, and operating models.
- Experience delivering IGA, PAM, and Secrets Management capabilities in complex enterprise environments.
- Experience working across both on-premises and cloud environments, integrating identities, applications, and access controls across hybrid platforms.
- Hands-on engineering experience implementing, integrating, and automating security technologies.
- Ability to engage effectively with both technical and non-technical stakeholders and influence decision-making at all levels.
- Proven ability to take ownership, drive initiatives, and deliver outcomes with minimal supervision.
- Strong understanding of identity lifecycle management, least privilege, RBAC, access governance, authentication, and privileged access management.
- Strong hands-on experience with platforms such as SailPoint (ISC), Delinea, CyberArk, HashiCorp Vault, or similar technologies.
- Strong automation-first mindset and experience applying Infrastructure-as-Code and Identity-as-Code practices
- Excellent communication, stakeholder management, and problem-solving skills.
Другое
- (QRT) is a global quantitative and systematic investment manager, operating in all liquid asset classes across the world. We are a technology and data driven group implementing a scientific approach to investing. Combining data, research, technology, and trading expertise has shaped QRT’s collaborative mindset which enables us to solve the most complex challenges. QRT’s culture of innovation continuously drives our ambition to deliver high quality returns for our investors.
- We are seeking a Security Engineer to help shape and deliver QRT's Identity Governance (IGA), Privileged Access Management (PAM), and Secrets Management capabilities.
- This is a hands-on engineering role requiring strong technical depth, stakeholder management, and the ability to influence change across the organisation. You will work with both technical and non-technical stakeholders to develop scalable identity and access management solutions, drive adoption of security best practices, and improve the maturity of IAM as a security discipline across QRT.