Senior Cyber Engineer

Since 2004, we’ve been bringing investment ideas to life and connecting capital with the right people and opportunities. Today, we manage more than £2.5 billion for a broad range of investors across five key investment strategies:
Private Credit, Social Housing, Clean Heat, Energy and Venture. These strategies underpin the innovative range of investments we offer to both private (retail) and institutional clients.

There are 230+ employees at Triple Point, all committed to leaving the world demonstrably better than we found it. That’s why we’re a certified B Corp, signed up to the Principles for Responsible Investment, and were named a Sunday Times 'Best Place to Work 2025'.

If this sounds like an environment where you would flourish, then read on…

The Technical Operations & Cyber team safeguards Triple Point’s infrastructure and ensures our technology runs smoothly, securely and reliably. The team supports colleagues with day-to-day IT needs while maintaining robust systems and cyber resilience to keep customers' data & operations safe and effective. The team sits within the wider Digital & Tech team.

We are seeking a Senior Cyber Engineer to lead project-based security engineering work, with a focus on securing identity, devices and cloud platforms.

You will serve as Triple Point’s specialist in identity, access, and cloud security controls, supporting the secure operation and working predominantly within our Microsoft 365, Azure, and Salesforce environments. Working closely with the Head of Technology Operations & Cyber, internal stakeholders, our IT MSP, and our SOC, you will ensure our environment is secure, resilient, and well-governed.

This is a hands-on, delivery-focused role owning security engineering projects end-to-end from design and planning through to implementation, documentation and transition into BAU.

• Security Engineering (Identity, Device & Cloud)
• Define, implement, maintain and enhance security baselines for:
  • Identity and access management
  • Microsoft 365 services (email, collaboration, file sharing)
  • MDM / Intune device management (enrolment, compliance, baselines, app protection, conditional access enforcement)
• Improve overall security posture in line with Zero Trust principles.
• Roll out new cloud security features and controls.
• Integrate SaaS platforms for secure SSO and lifecycle management.
• Continuously review and strengthen our cyber posture using industry-standard security benchmarks, configuration assessments and cloud security recommendations.
• Establish, champion and evolve patterns for:
  • Application onboarding and SSO
  • Admin access and just-in-time elevation
  • Use of service accounts and service principals
• Enhance identity and access logs and signals within detection and response tooling.
• Tune identity-related alerts in partnership with SOC analysts.
• Support investigations into identity-related security incidents and lead root-cause analysis.
• Contribute to internal/external audits, penetration tests and regulatory reviews relating to identity, access or cloud security.

• Support assurance activities, including internal/external audits, penetration tests and regulatory reviews relating to identity, access and cloud security.
• Maintain documentation for identity and cloud security configurations, guardrails and principles.
• Contribute to policies, standards and procedures related to identity, access and cloud security.
• Support the business in embedding consistent security-by-design practices.

• Strong understanding of Microsoft 365 security capabilities, Azure cloud security concepts and Zero Trust principles.
• Significant hands‑on experience administering and securing identity and access management platforms in a complex enterprise environment.
• Strong knowledge of adaptive access and MFA, RBAC and least privilege, Privileged Access Management, Data Loss Prevention, Identity Governance & access reviews, application onboarding and modern authentication (SAML/OAuth/OIDC).
• Proven experience delivering end‑to‑end security or platform engineering projects in cloud environments.
• Ability to translate…