Access Management & Cyber Engineer
On site
London, United Kingdom
Full Time
04-03-2025
Job Specifications
Do you want your voice heard and your actions to count?
Discover your opportunity with Mitsubishi UFJ Financial Group (MUFG), one of the world’s leading financial groups. Across the globe, we’re 120,000 colleagues, striving to make a difference for every client, organization, and community we serve. We stand for our values, building long-term relationships, serving society, and fostering shared and sustainable growth for a better world.
With a vision to be the world’s most trusted financial group, it’s part of our culture to put people first, listen to new and diverse ideas and collaborate toward greater innovation, speed and agility. This means investing in talent, technologies, and tools that empower you to own your career.
Join MUFG, where being inspired is expected and making a meaningful impact is rewarded.
The Access Management, Policy & Reporting team sits within the IT Risk, Security & Control Department. The team is responsible for the following:
Provision of access for IT systems across MUFG Bank & EMEA Offices and MUFG Securities EMEA
Identity Access management process including Joiner, Mover, Leaver of identities and access reviews.
Folder access management.
Management and maintenance of all Technology core documentation (Bank and Securities Policies, Technical Standards, Procedures and Processes within the remit of the Head of Technology for Bank EMEA and the International Head of Technology for Securities/CIO.
The team is also responsible for submitting data to the Quarterly Business Review (QBR) Global Leads for selected regions and producing IT reports for senior management and the Board.
The Team reports directly to the Head of IT Risk, Security & Control.
Main Purpose of the Role:
In this role, you will be responsible for enforcing company policies and procedures related to identity and access management across MUFG’s banking arm and securities business under a dual-hat arrangement. Under this arrangement, you will act and make decisions on behalf of both the bank and the securities business, subject to the same remit and level of authority, and irrespective of the entity which employs you.
The candidate should have a good understanding of governance structures within the financial technology sector as well as knowledge of the key technical frameworks and audit requirements. In addition, the candidate is expected to have demonstrable communication and team-working skills. The candidate should also be willing provide ad-hoc support to the wider RSC teams.
Key Responsibilities:
Provide engineering support for Privileged Access Management (CyberArk) and Identity Access Management (RSA IGL) application.
Create and mature access reviews in the Identity Access Management application.
Represent the team in meetings to gather business requirement and lead on solutions as required.
Develop and mature folder access process.
Mature and implement privileged access controls
Investigate and closure of raised incidents assigned to team.
Manage queries relating to application operations including password and access issues etc.
Follow up with required approvers/stakeholders for approvals or clarifications through phone, email or tickets.
Contribute to the Knowledge Management Database. Record events and problems and their resolution in knowledge base/SOP.
Read and review the standard operating procedures and required training materials. Create additional documentation, as needed to support processes.
Identify and suggest possible improvements on procedures.
Engage in knowledge transfer session for any newly on boarded application that comes under the scope of user access management.
Follow-up and update relevant trackers and systems.
Define and communicate access role ownership accountabilities for business applications.
Identify vulnerabilities and gaps in identity access management operations and privileged access management operation process.
Creating KPIs for BAU processes.
Experience with active directory management of accounts and groups.
Experience in enforcing ‘least privilege’ methodology for all access provisioning.
Ability to create reports with custom SQL queries
Investigate workflow errors including API issues with ServiceNow
Experience:
Minimum Overall experience of 3-4 years in Access Management area.
Practical experience of CyberArk and RSA IGL or other applications
Experience using SQL/ PSQ and Oracle
Practical experience Web services protocols REST/SOAP.
Practical experience with JAVA/JSP
Practical experience with web development basics like HTML, CS, JS .
Maintain and upgrade Linux/Windows servers and databases SQL/Oracle
Good to excellent practical experience of Microsoft Office (Inc Visio).
Knowledge and experience of scripting in PowerShell.
Knowledge of IAM tool preferably RSA IGL.
Participate in IAM audit and review access control reports to identify potential risks.
Desirable
Knowledge of Technical/Cyber Security risk frameworks (e.g. ISO27001, NIST, FFIEC)
Experience of documenting IAM processes and procedures.
Flexibility in working in a 24/7 shift model
Risk Management processes.
Incident management.
Splunk experience.
ServiceNow experience.
MUFG operates a hybrid working model with 3 days per week in the office.
We are open to considering flexible working requests in line with organisational requirements.
MUFG is committed to embracing diversity and building an inclusive culture where all employees are valued, respected and their opinions count. We support the principles of equality, diversity and inclusion in recruitment and employment, and oppose all forms of discrimination on the grounds of age, sex, gender, sexual orientation, disability, pregnancy and maternity, race, gender reassignment, religion or belief and marriage or civil partnership.
We make our recruitment decisions in a non-discriminatory manner in accordance with our commitment to identifying the right skills for the right role and our obligations under the law.
About the Company
MUFG (Mitsubishi UFJ Financial Group) is one of the world's leading financial groups. Headquartered in Tokyo and with over 360 years of history, MUFG has a global network with over 2,100 locations in more than 40 markets including the Americas, Europe, the Middle East and Africa, Asia and Oceania. The Group has over 120,000 employees and offers services including commercial banking, trust banking, securities, credit cards, consumer finance, asset management, and leasing. Through close partnerships among our group companies, ... Know more
Related Jobs
- Company Name
- Natobotics
- Job Title
- AWS Cloud Architect
- Job Description
- Job Summary We seek an experienced AWS Cloud Architect with expertise in AWS Landing Zones and Amazon Virtual Private Cloud (VPC). The ideal candidate will design, implement, and optimize cloud networking infrastructure to ensure security, scalability, and compliance with industry standards. Key Responsibilities Design and implement AWS Landing Zones for multi-account cloud environments. Architect and manage Amazon VPCs, ensuring secure and high-performance networking. Establish network connectivity between on-premises data centers and AWS using VPNs and AWS Direct Connect. Implement security best practices, including VPC peering, security groups, NACLs, and firewall configurations. Automate infrastructure provisioning using Infrastructure as Code (IaC) tools like Terraform and AWS CloudFormation. Collaborate with cross-functional teams to optimize AWS environments for performance, cost, and security. Monitor and troubleshoot network issues, latency, and connectivity challenges in AWS environments. Ensure compliance with AWS Well-Architected Framework and governance policies.
- Company Name
- CGI
- Job Title
- DevOps Engineer
- Job Description
- Position Description The Space, Defence and Intelligence business unit in CGI is a true IT Systems Integrator. We work, build, and operate bespoke, technically complex, mission-critical systems which help our clients keep us all safe and secure. We bring innovation to our clients using proven and emerging technologies, agile delivery processes and our deep expertise across the breadth of space, defence, intelligence, aerospace and maritime, all underpinned by our end-to-end cyber capability. We work collaboratively with global technology companies, cutting edge SMEs and academia to deliver the optimal solution for each client. CGI was recognised in the Sunday Times Best Places to Work List 2024 and has been named one of the ‘World’s Best Employers’ by Forbes magazine. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you’ll be part of an open, friendly community of experts. We’ll train and support you in taking your career wherever you want it to go. Due to the secure nature of the programme, you will need to hold UK Security Clearance or be eligible to go through this clearance. This position will be a hybrid position, working out of our site in Leatherhead. Your future duties and responsibilities CGI’s Secure Space Systems division is on the hunt for a proactive and experienced DevOps Engineer to lead our Kubernetes deployments across a variety of platforms. If you’re passionate about automation, continuous integration/continuous deployment (CI/CD) pipelines, and maintaining a secure-by-design infrastructure, we want to hear from you! What You’ll Do: Kubernetes Management: Oversee and manage Kubernetes platforms for both development and production environments. Multi-Platform Deployment: Deploy and support Kubernetes on platforms including RKE2, EKS, Tanzu, and OpenShift. CI/CD Pipeline Automation: Automate and monitor CI/CD pipelines using tools such as GitLab CI, Jenkins, Ansible, Terraform, and CloudFormation. Security Leadership: Implement and monitor security best practices to ensure our infrastructure is resilient and secure. Performance Monitoring: Keep a close eye on performance metrics across all nodes and proactively address issues. Team Mentorship: Collaborate with senior technical leads and mentor junior engineers, sharing your expertise in DevOps and Kubernetes. Required Qualifications To Be Successful In This Role DevOps Expertise: Proven experience in a DevOps environment with a strong command of Linux and container platforms. Kubernetes Know-How: Deep technical understanding of Kubernetes and experience with various Kubernetes distributions (K8S, K3S, EKS, AKS, RKE2, OpenShift). Infrastructure Savvy: Solid background in infrastructure management, virtualization, and network configuration. Security Focused: Familiarity with security best practices, including working in environments with security air gaps. Communication & Collaboration: Excellent communication skills with a flexible, innovative mindset to work effectively with internal and external stakeholders. Bonus Skills: Proficiency with GitLab and Jenkins. Experience in using Ansible, Terraform, or CloudFormation to streamline infrastructure automation. Why CGI Secure Space Systems? At CGI, you’ll have the opportunity to work on cutting-edge projects in a dynamic, fast-paced environment. Join our small yet highly skilled team where you can make a significant impact, driving innovation and maintaining a secure, robust infrastructure for our next-generation space systems. Together, as owners, let’s turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because… You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction. Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. Come join our team—one of the largest IT and business consulting services firms in the world.
- Company Name
- Figment
- Job Title
- Senior DevOps Engineer, New Networks
- Job Description
- You could work anywhere. Why Figment? Figment powers the future of Web3 through industry-leading blockchain infrastructure. As the leading provider of staking solutions, we help 500+ institutional clients optimize their crypto rewards, including top exchanges, asset managers, wallets, foundations, custodians, and major token holders. Our clients trust Figment for a comprehensive suite of services, including reward optimization, cutting-edge API development, detailed rewards reporting, seamless partner integrations, governance support, and slashing protection. Backed by a team of passionate and intelligent Figmates, with a 100% remote-first global presence across 12 countries, our company is on a mission to accelerate the adoption, growth, and long-term success of the Web3 ecosystem. We’re building the infrastructure that will power the decentralized future. As a fast-growing tech company, we’re looking for builders and innovators — people who thrive in the face of uncertainty and are motivated to make an impact. We are also looking for true teammates - people who are genuine, humble, and driven to level up together. If you're excited to shape the future, contribute to an energetic company culture, and work at the cutting edge of blockchain technology, we want you to join our team and help us lead the charge! About The Opportunity We run 70+ blockchains here at Figment. Come help us onboard more! This is a full-time remote position, with team members in North America and Europe. We are seeking a Senior DevOps Engineer to help us scale out our operations by planning and implementing projects to manage fleets of blockchain servers. This role presents unique opportunities to be involved in building out tooling where none exists in the industry. You will build production systems that need to handle newer (sometimes alpha quality) blockchain software. You’ll need to consider all aspects of security, monitoring, maintainability, and stability. How You Will Make An Impact Lead the planning, testing, implementation, and management of projects to deliver scalable, maintainable, secure, and stable deployments across a variety of use cases Identify & implement solutions for common areas where automation can significantly increase our ability to manage all our infrastructure Identify areas of systemic risk & evaluate, propose, and implement solutions Manage and monitor cloud and physical servers across multiple global hosting services and data centres Automate blockchain software build, install, and management processes Perform Linux server administration, hardening, intrusion detection, and vulnerability scanning Debug complex distributed blockchains to help run them smoothly Identify tasks and processes that get stuck or move slowly and support the team in pushing them through Explain broad initiatives and vision to Engineering Leadership and Product Demonstrate technical expertise in multiple domains and act as a mentor to others on the team Who you are In-depth experience using Ansible (and similar tools) in environments with over 500 servers: Designing complex static and dynamic inventories, variable structures, and playbooks Writing custom Ansible roles from scratch, with advanced features such as Jinja2 templating, complex logic flows, dynamic roles/tasks, and handlers Ensuring idempotency & reusability, and following applicable best practices In-depth experience supporting Linux servers in large, highly secure, and highly available 24/7 environments Demonstrated experience working with blockchain nodes or very strong knowledge of the blockchain domain Deep troubleshooting expertise of complex application flows which span multiple clusters of systems - to quickly identify server, network, and application issues; and methodical approach to implementing, testing, and measuring changes to remediate issues Knowledge of common OS and application level settings to optimize system performance Experience with common system administration scripting languages such as Bash and Python In-depth experience creating well organized modules with Terraform to ensure reusable cloud provisioning automation Deep understanding of networking and security best practices Even better if you have Ansible role testing with Molecule (or similar tools) and Ansible module development experience Knowledge of, or experience with, Proof-of-Work and Proof-of-Stake decentralized consensus mechanisms used in blockchains Experience running applications on Kubernetes Experience creating CI/CD pipelines from scratch to automate infrastructure provisioning and deploy applications (GitHub Actions or similar tools) Experience with Hashicorp Vault or other secure storage tools Why You Might Be Excited About Us At Figment, we offer an exciting range of competitive benefits designed to support and empower every member of our team. These will be discussed with you during the interview process. We are a team of under 200 members, which allows for an impactful contribution from day one. We place a strong focus on personal career development to shape a role that fits your goals and interests. Your satisfaction and well-being matter to us, and we’re here to support your ongoing growth. Our culture is one of honesty, professionalism and risk taking in a high-growth environment. Our team members themselves recommend working at Figment - with an eNPS score of 54 (which is ranked as ‘great’!). We are also extremely proud of ranking as one of the top Web3 employers by Talent Titans. Compensation One of Figment’s core principles is “Making the Invisible Visible” - ensuring transparency and information sharing in all communication. Figment is committed to transparency regarding pay, benefits, and other compensation types for all internal roles as well as all roles being hired for. Compensation for this role will be disclosed during the interview process. Interview process At Figment, we try to go above and beyond in making sure that you have the best possible experience interviewing with us. We strive for a smooth, organized, and informative process. During your first Recruiter Call, you will be provided with more information about Figment, the position and what to expect for the rest of the interview process. Please be prepared to discuss why you are interested in joining Figment and what excites you about the position and company. As we go through the process, we work to make sure that you hear back from us in a timely fashion. If we decide at any point that we’re unfortunately not moving forward, we will give you feedback on why it was not a fit. We aim for the entire process to take around 2-3 weeks from initial screen to offer. There can be exceptions on either side of the bell curve here, but as a rule, that’s the time-frame you can expect. See here for Figment's Privacy Policy and California Employee Privacy Policy. At Figment, we have a thorough hiring process to verify the identity of all job candidates. This...
- Company Name
- Microsoft Power Platform Community
- Job Title
- Security Go-to-Market (GTM) Manager, UK
- Job Description
- Overview Security is Microsoft’s number one priority and in the era of AI, organisations need to enhance their security posture to prevent, detect and remediate AI-powered attacks and also govern their data to enable AI-powered business transformation responsibly. The Security Business Group team plays a fundamental role in Microsoft UK , setting the local Go-To-Market strategy for our Security products portfolio, advocating for our solutions, enabling our sellers and partners and orchestrating the execution of th e plan s . This particular role is focused on orchestrating our Enterprise execution, working close with the product-aligned GTM Managers to identify opportunities, design programmes , enable sellers and gather insights . We are looking for an experienced individual contributor in Sales Enablement or Go-To-Market. Someone with a passion for helping protect organisations against Cyber threat s and able t o translate cloud services strategy and objectives into clear, discrete, and executable plans for the UK . In this role you will analyse reports to understand our business health and identify focus areas. You will col laborate with other members of the team who look after specific products to develop a robust Sales Enablement plan and execution rhythm with stakeholders across Sales and Customer Success to achieve goals. You will also support the Security Business Group Leader consolidate insights and provide regular updates to local, regional and global leaders Our team mission is to s afeguard the UK's people, data, and infrastructure with the most trusted AI-powered end-to-end security, through simplification, collaboration and insights-led best practices. Microsoft is on a mission to empower every person and every organization on the planet to achieve more , s ecurely! Our culture is centered on embracing a growth mindset, a theme of inspiring excellence, and encouraging teams and leaders to bring their best each day. In doing so, we create life-changing innovations that impact billions of lives around the world. You can help us to achieve our mission. Responsibilities You will develop and execute business strategy across the business, and accept accountability for revenue and KPIs. You’ll also identify strategic priorities for stakeholders, consolidate insights, and help development programs drive sales and marketing. You will lead definition and orchestration of strategic go-to-market plans across the business, ensuring they support a One Microsoft approach. You’ll also build and land growth plans, lead a complex stakeholder map, and prioritize impact over activity. You will ensure business unit leads and subsidiaries can equip channels and sellers with the knowledge and resources they need, and ensure field and corporate leadership are aligned. You’ll also drive leadership by pursuing long-range white-space growth opportunities, and develop strategies that maximize performance across the business. You will ensure customers have hardware availability, while driving a pipeline of feedback from sales to the supply chain. You’ll also proactively drive capacity forecasting, coach deals on alternative services, and drive pipeline and sales enablement. Qualifications E xperience in Go-to-market execution or business planning, project management, sales operations, ro les collaborating across sales, marketing and partners teams. Domain experience in the Security or a related field which may be transferable for you to excel in this role. Proficiency working with data, analysing reports to extract insights that would support business decisions Outstanding communication skills , able to adapt styles for different stakeholder audiences (leadership, sales, marketing) simplify ing the complex and providing clarity Ability to lead without authority , influencing people in different parts of the organisation Curious and Entrepreneurial mindset , to naturally question, explore, agitate, and push the business forward. Tak ing risks, learn ing from failures, operat ing within ambiguity and at pace , defining new ways to overcome business challenges You must be legally authorised to work in “United Kingdom” to be eligible for this role. (Legally authorised = Has citizenship or has been granted a valid visa or work permit). Relocation expenses are not provided as part of this role. Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request via the Accommodation request form . Benefits/perks listed below may vary depending on the nature of your employment with Microsoft and the country where you work.