Identity Security Engineer
FNZ is a global wealth management platform provider.
Projects
About FNZ
FNZ describes itself as 'wealth's growth platform', providing a global, end-to-end wealth management platform that integrates modern technology, business operations, and investment operations within a regulated financial institution connected to a universe of investment products. The company serves banks, wealth managers, insurance companies, and asset managers, with over US$2.5 trillion in assets on platform and nearly 30 million end investors served through its clients. Its offerings span wealth management platforms, advisor tools and productivity solutions, asset management distribution, and trade and post-trade securities services, along with a data platform combining an Operational Data Store, Analytical Data Warehouse, and Aggregated Data Warehouse to power analytics, machine learning, and generative AI insights. FNZ has notable clients including Santander, Colonial First State (CFS), Vanguard, Aviva, and Swedbank, and in 2025 announced a global five-year strategic partnership with Microsoft to integrate Azure AI Foundry, Microsoft Fabric, GitHub Copilot, and Microsoft 365 Copilot across its platform and operations. FNZ is backed by major institutional shareholders including Caisse de dépôt et placement du Québec (CDPQ), CPP Investments, Generation Investment Management, and Motive Partners.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will design, automate, and implement identity and privileged access management solutions. You will improve identity security controls, cloud identity practices, governance, documentation, monitoring, and access-group management while working with security stakeholders.
Requirements
- Strong IAM lifecycle experience, specifically with Entra, Active Directory, and cloud environments.
- SME-level knowledge of developing and managing formal security documents.
- Ability to manage internal stakeholders through information-security maturity improvements.
- Ability to communicate information-security and risk concepts to stakeholders at all levels.
- Strong knowledge of Saviynt and CyberArk.
- Knowledge of identity stores, including Entra ID and Active Directory, and cloud identity concepts.
- Ability to script automated solutions and engage business stakeholders on identity concepts.
Responsibilities
- Contribute to the Identity group roadmap.
- Drive automation initiatives for Entra and Active Directory.
- Build governance and oversight for security controls and services.
- Support delivery of the information security strategy.
- Mature cloud identity concepts for Azure, AWS, and GCP.
- Develop and maintain security policies and standards.
- Build controlled monitoring for privileged access and identity governance.
- Build groups and manage users within groups for key platforms and services.
- Develop consistent global identity services.
Benefits
- Flexible and agile working that accommodates business and personal circumstances.