Senior Application Security ​/ Identity Security Engineer

We are

We began life in 2001 as a small, self-funded team of technology specialists. Since then, we’ve grown our organization to 16,700 people, across 57 offices, in 22 countries, in key global markets.

We're now a leading global digital consulting firm, providing innovative technology solutions for business. As a trusted partner, we're always at the forefront of change as we lead digital optimization and modernization journeys for our clients.

Our expertise in AI, Consulting, Data, Digital, Cloud & Dev Ops and Software Engineering, delivers customized, end-to-end solutions that drive business value and growth.

We are seeking experienced Senior Application Security / Identity Security Engineer with strong experience in authentication, authorization, and modern identity protocols . This role will focus on designing, implementing, and securing identity integrations across internal and external systems, ensuring secure access management and alignment with security best practices and audit requirements.

The ideal candidate will have hands-on experience with MFA, TOTP, SSO/SAML, OAuth, and OpenID Connect (OIDC) , along with a strong understanding of AuthN/AuthZ patterns , secure integration architecture, and application security principles. Experience supporting regulated environments, external system integrations, and security or compliance frameworks such as SOC 2 is highly valued.

• Design, implement, and support secure authentication and authorization solutions across enterprise applications and external integrations
• Build and maintain identity and access management integrations using protocols such as SAML, OAuth 2.0, OIDC, and SSO
• Implement and enhance multi-factor authentication (MFA) solutions, including TOTP-based authentication
• Collaborate with engineering, infrastructure, and security teams to ensure secure access controls are embedded into application and platform design
• Review application and system integrations to ensure proper AuthN/AuthZ controls are in place when external systems are invoked
• Apply secure development and architecture best practices across authentication flows, APIs, and third-party integrations
• Conduct security reviews and support remediation of vulnerabilities identified through assessments, testing, or tooling
• Partner with internal stakeholders on security governance, risk reviews, and audit preparedness, including work related to SOC 2 and similar controls
• Support threat modeling, security design reviews, and risk assessments for identity-related implementations
• Recommend and implement security tooling and controls to improve visibility and reduce application and identity-related risk
• Contribute to documentation, standards, and operational procedures related to identity security and application access management

• 5+ years of experience in application security, identity security, IAM, or security engineering
• Strong hands-on experience with:
  - Multi-Factor Authentication (MFA)
  - TOTP
  - Single Sign-On (SSO)
  - SAML
  - OAuth 2.0
  - OpenID Connect (OIDC)
• Strong understanding of authentication and authorization concepts and how they apply to enterprise applications, APIs, and external system integrations
• Experience implementing or reviewing secure integrations where external systems or services are invoked
• Knowledge of security best practices for application and identity architecture
• Experience supporting or participating in security audits, compliance reviews, or control assessments such as SOC 2
• Ability to work cross-functionally with technical and non-technical stakeholders
• Strong communication, documentation, and problem-solving skills

• Experience in financial services , fintech, or other regulated industries
• Familiarity with OWASP security principles and secure coding best practices
• Experience with application security and vulnerability management tools such as Snyk
• Relevant certifications such as:
  - CISSP
  - CCSP
  - Security+
  - Identity-related or cloud security certifications
• Experience with API…