{"id":2702990,"url":"https://alion.io/job/flowdesk-identity-access-management-data-protection-specialist","title":"Identity Access Management & Data Protection Specialist","company":{"id":53133,"name":"Flowdesk","domain":"flowdesk.co","url":"https://alion.io/company/flowdesk","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Data Science","role_family":"Data Science","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":74000,"max_usd":170000,"period":"year","method":"role_country_seniority_unknown","sample_n":183},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"DLP","optional":false},{"name":"Kubernetes","optional":false},{"name":"PKI","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-10-16T09:14:19Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-22T01:24:33Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"About Flowdesk\nAt Flowdesk, we are building the infrastructure powering the next era of global finance. As a full-service digital asset trading and technology firm, we provide liquidity solutions, OTC trading, and market infrastructure that connect digital assets to global markets with institutional-grade precision, transparency, and scale. Flowdesk combines expertise from traditional finance, algorithmic trading, and blockchain technology to deliver always-on trading capabilities across the digital asset ecosystem.\nFounded in 2020, we have grown into a global team supporting institutions, exchanges, and token issuers worldwide as the financial system evolves toward tokenized markets.\nWhy join Flowdesk? You’ll be joining a company operating at the intersection of finance, technology, and crypto - solving complex market problems, building critical infrastructure, and helping shape how digital assets move globally. We move fast, think long term, and work with a strong ownership mindset across engineering, trading, product, operations, and business teams.\nRole Description\nIdentity is the main control point across our SaaS, cloud and internal systems. The Security team makes sure access to sensitive systems is tightly controlled and provable to auditors and regulators, and that the data behind those systems is protected.\nIn this role you will plan, build and run our identity provider setup and single sign-on estate, including Identity Governance and Administration (IGA) for all Flowdesk identities. You will also cover Data Protection - data encryption, PKI, Key Management, data classification and DLP from a plan, build and run perspective.\nYou will work as part of the wider security team, alongside Secure Engineering, IT Operations, HR and application owners.\nKey Responsibilities\nOwn the identity provider and SSO estate: onboarding applications, enforcing MFA, and keeping SAML, OIDC and SCIM integrations healthy\nDesign and run Authentication and Access Management for our own products and internal tools, including OAuth 2.0 flows, token handling and session policy, through Terraform and infrastructure as code where possible\nPlan and deliver identity projects, such as IdP consolidation, passwordless, conditional access, IGA and JML automation\nContribute to the joiner, mover and leaver process across the organisation, working with IT Operations, HR and application owners so access follows role and is removed promptly\nDesign and implement Data Classification, DSPM and DLP capabilities\nDesign and manage data protection solutions such as HSMs, Key Management, Secrets and Password Management, and PKI-related solutions\nDesign and run privileged access management (PAM) and just-in-time (JIT) access, so elevated access is granted for a set purpose and time, approved, logged and removed automatically\nHelp run regular access review campaigns and manage break-glass accounts and service account governance\nReview application and API authentication designs with Secure Engineering, and advise teams on best practice implementation\nProduce evidence and reporting for audits and regulators\nMonitor identity logs for abuse, and help respond to account compromise\nWork as part of the wider security team, and cover gaps in other areas when they arise, such as during absences, incidents or peaks in workload\nRequirements\nMust Have\nSeveral years in identity security and data protection, with hands-on delivery of an IdP and SSO rollout\nDeep working knowledge of SAML, OIDC, OAuth 2.0, SCIM and JWT, including common implementation mistakes\nExperience with at least one enterprise identity provider and one customer or application identity platform\nExperience with PAM and JIT access, ideally for cloud, SaaS and production environments\nExperience with the joiner, mover and leaver process, and an understanding of how it works across HR, IT and application teams\nSolid understanding of Terraform and infrastructure as code, and the ability to work day to day in an environment where infrastructure is managed that way\nScripting skills (required for the role)\nGeneral security knowledge across the main domains\nA process-oriented approach: you document what you do, follow change control, and leave an audit trail\nClear writing, since much of the job is documenting decisions and explaining them to auditors and engineers\nWillingness to work across the security team and learn adjacent areas, such as incident response, GRC evidence or cloud security, as needed\nPreferred\nHighly desired\nExperience working in a regulated, controlled environment, such as financial services or crypto\nHelpful\nCustomer identity (CIAM) experience\nMachine identity and secrets management in cloud and Kubernetes\nAgentic AI access management\nRelevant certifications (CISSP, CISM, CEH or similar)\nPerson Profile\nProcess-oriented: documents decisions, follows change control and leaves a clear audit trail\nClear communicator, able to explain technical decisions to both auditors and engineers\nComfortable working across disciplines and stepping in on adjacent security areas when the team needs it\nPragmatic and automation-minded: prefers infrastructure as code and scripting over manual change\nHolds a high bar for control and evidence in a regulated, high-trust environment\nCompany Culture & Values\nTake Action & Own the Mission\nBe of Service & Contribute\nInnovate, Create Value, & Be Courageous\nAct with Integrity & Respect\nBenefits\nInternational environment (English is the main language)\n100% health coverage\nTeam events and offsites\nCompany Pension scheme\nLearning and Development budget","description_format":"text","description_chars":5598,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":true}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Blockchain & Crypto","Blockchain Infrastructure","Crypto Exchanges"],"lifecycle":[{"event":"open","at":"2026-10-16T11:45:37Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker","cap_exempt":false,"checked_at":"2026-10-21T06:25:45+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":32,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/flowdesk-identity-access-management-data-protection-specialist","json_url":"https://alion.io/job/flowdesk-identity-access-management-data-protection-specialist.json","meta":{"generated_at":"2026-10-22T02:44:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2356,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":53133},"rest":"https://alion.io/mcp/rest/get_company?id=53133"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fflowdesk-identity-access-management-data-protection-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fflowdesk-identity-access-management-data-protection-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fflowdesk-identity-access-management-data-protection-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/flowdesk-identity-access-management-data-protection-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fflowdesk-identity-access-management-data-protection-specialist"}]}