Security Engineer - Identity, Privileged Access & Secrets Management

Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager, operating in all liquid asset classes across the world. We are a technology and data driven group implementing a scientific approach to investing. Combining data, research, technology, and trading expertise has shaped QRT’s collaborative mindset which enables us to solve the most complex challenges. QRT’s culture of innovation continuously drives our ambition to deliver high quality returns for our investors.

We are seeking a Security Engineer to help shape and deliver QRT's Identity Governance (IGA), Privileged Access Management (PAM), and Secrets Management capabilities.

This is a hands-on engineering role requiring strong technical depth, stakeholder management, and the ability to influence change across the organisation. You will work with both technical and non-technical stakeholders to develop scalable identity and access management solutions, drive adoption of security best practices, and improve the maturity of IAM as a security discipline across QRT.

Responsibilities

• Own and continuously improve QRT's IGA, PAM, and Secrets Management capabilities.
• Build strong relationships with Infrastructure, Engineering, HR, and business stakeholders to understand requirements and drive outcomes.
• Lead identity and access initiatives from conception through to delivery, influencing stakeholders and driving adoption.
• Design and implement solutions for identity lifecycle management, privileged access, authentication, and secrets management across on-premises and cloud environments.
• Design and implement role-based access control (RBAC) models and policies within the IGA Tool.
• Support uplift and maintenance of Active Directory (AD) groups to align with governance policies.
• Integrate secrets management platforms with CI/CD pipelines, cloud services, and enterprise applications.
• Develop automation and Infrastructure-as-Code / Identity-as-Code solutions to improve security, governance, and operational efficiency.
• Develop automation and integrations to improve security, governance, and operational efficiency.
• Provide guidance on IAM principles, governance models, standards, and best practices.
• Support access reviews, audits, investigations, and risk management activities.
• Act as a subject matter expert for identity-related technologies, processes, and controls.

Skills & Experience

• 5-10 years' experience in Identity & Access Management, Security Engineering, or a related discipline.
• Strong understanding of Identity and Access Management principles, methodologies, governance, and operating models.
• Experience delivering IGA, PAM, and Secrets Management capabilities in complex enterprise environments.
• Experience working across both on-premises and cloud environments, integrating identities, applications, and access controls across hybrid platforms.
• Hands-on engineering experience implementing, integrating, and automating security technologies.
• Ability to engage effectively with both technical and non-technical stakeholders and influence decision-making at all levels.
• Proven ability to take ownership, drive initiatives, and deliver outcomes with minimal supervision.
• Strong understanding of identity lifecycle management, least privilege, RBAC, access governance, authentication, and privileged access management.
• Strong hands-on experience with platforms such as SailPoint (ISC), Delinea, CyberArk, HashiCorp Vault, or similar technologies.
• Strong automation-first mindset and experience applying Infrastructure-as-Code and Identity-as-Code practices
• Excellent communication, stakeholder management, and problem-solving skills.

 

 QRT is an equal opportunity employer. We welcome diversity as essential to our success. QRT empowers employees to work openly and respectfully to achieve collective success. In addition to professional achievement, we are offering initiatives and programs to enable employees achieve a healthy work-life balance.