Job Description



Cantor Fitzgerald's Global Information Security team is seeking a proactive Junior Information Security Engineer to join our fast-paced environment in London. You will plan, coordinate, and execute IAM initiatives across cloud and on-premise platforms, partner with DevSecOps, support incident response, and ensure compliance with industry standards while continuously improving documentation and automation.




Responsibilities

• Design, implement, and maintain authentication systems (LDAP, AD, Kubernetes, Microsoft Entra) using OIDC, OAuth, and SAML protocols.


• Manage privileged access solutions (CyberArk, Keeper) and identity governance platforms (SailPoint, IBM, Oracle).


• Integrate IAM controls into DevSecOps CI/CD pipelines and automate workflows with AI/automation tools.


• Define and enforce IAM policies across AWS, Azure, and GCP cloud environments.


• Document configurations, standards, and procedures in centralized repositories and maintain run-books.


• Support global incident response, including tabletop exercises and post-mortem analysis.


• Provide evidentiary support and remediation tracking for audit, compliance, and risk assessments.


• Advise project teams, application owners, and infrastructure services on security controls and best practices.


• Monitor security metrics, generate reports, and act as regional IAM incident response point of contact.


• Utilize service, incident, and change management tools (ServiceNow, Dynamics 365) to track and resolve issues.

• Bachelor's degree or equivalent experience; 3-5 years IAM experience in financial services.


• Hands-on experience with Microsoft Entra, Okta, Ping One, Auth0, and authentication protocols (OAuth, OIDC, SAML).


• Proven work with PAM solutions (CyberArk, Keeper) and remote-desktop security tools.


• Deployment and administration of IGA platforms such as SailPoint, Saviynt, or Oracle.


• Strong scripting/automation skills (PowerShell, Python) and API integration experience.


• Familiarity with ticketing and PMO tools (ServiceNow, Dynamics 365, Smartsheet, Monday.com).


• Knowledge of cloud IAM across AWS, Azure, GCP and related security services.


• Experience with SIEM/SOAR (Splunk, PAN Cortex) and firewall technologies (Palo Alto, F5) is a plus.


• Excellent communication, documentation, and cross-team collaboration abilities.


• Proactive, detail-oriented, able to manage multiple priorities in a fast-paced environment.