Identity Access Management & Data Protection Specialist
Full-service digital-asset trading and technology firm providing liquidity solutions, institutional OTC trading, tokenized-market infrastructure, and strategic digital-asset investment.
Funding history
Projects
About Flowdesk
Flowdesk operates institutional digital-asset market infrastructure and trading services, combining proprietary execution algorithms, risk management, global venue connectivity, liquidity provision, OTC spot/derivatives/credit trading, and tokenized-asset liquidity. Its clients include institutions, token issuers, exchanges, and professional market participants. The website is operated by Flowdesk SAS, headquartered in Paris, France.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will plan, build, and operate identity-provider, single-sign-on, identity-governance, and data-protection capabilities. You will secure authentication, privileged access, encryption, key management, data classification, and data-loss-prevention controls. You will also support access reviews, audits, incident response, and application authentication design reviews.
Requirements
- Several years of identity security and data-protection experience, including hands-on IdP and SSO rollout delivery
- Knowledge of SAML, OIDC, OAuth 2.0, SCIM, and JWT
- Experience with an enterprise identity provider and a customer or application identity platform
- Experience with PAM and JIT access
- Experience with joiner, mover, and leaver processes
- Understanding of Terraform and infrastructure as code
- Scripting skills
- General security knowledge
- Clear writing and documentation skills
- Willingness to work across adjacent security areas
- Experience in a regulated environment such as financial services or crypto
- CIAM experience
- Machine identity and cloud or Kubernetes secrets-management experience
- Agentic AI access-management experience
- Relevant certifications such as CISSP, CISM, or CEH
Responsibilities
- Own the identity provider and single sign-on estate, including application onboarding, MFA, and SAML, OIDC, and SCIM integrations
- Design and operate authentication and access management for products and internal tools
- Plan and deliver identity projects, including IdP consolidation, passwordless access, conditional access, IGA, and joiner-mover-leaver automation
- Contribute to joiner, mover, and leaver processes with IT Operations, HR, and application owners
- Design and implement data classification, DSPM, and DLP capabilities
- Design and manage HSM, key management, secrets management, password management, and PKI solutions
- Design and operate privileged access management and just-in-time access
- Run access-review campaigns and govern break-glass and service accounts
- Review application and API authentication designs and advise on implementation
- Produce audit and regulatory evidence and reporting
- Monitor identity logs for abuse and help respond to account compromise
- Cover adjacent security areas during absences, incidents, and workload peaks
Benefits
- 100% health coverage
- Team events and offsites
- Company Pension scheme
- Learning and Development budget