Identity and Access Management Lead (57FAB68)

Referment is working with a quantitative investment manager to appoint an Identity and Access Management Lead. Technology supports the firm's research and trading, and this role owns how people and systems gain access across its global engineering environment.

You will set the identity-security roadmap and develop the team delivering it, while remaining closely involved in architecture and implementation. The remit extends beyond workforce login: it includes production privileges, application permissions, and the credentials used by services and workloads.

Working with security, infrastructure, cloud, and engineering teams, you will turn security requirements into controls that are practical for the people building and operating the firm's systems.

The Role

• Improve the full identity lifecycle, from joining and changing roles to removing access, with clear ownership of permissions and access reviews.
• Rework inherited access models and directory permissions so that entitlements reflect what people actually need.
• Lead privileged-access improvements, replacing unnecessary standing permissions with controlled, time-limited access to sensitive environments.
• Develop secrets management around HashiCorp Vault, including how credentials are issued, rotated, and retired.
• Guide authentication and authorisation across applications and infrastructure, and support incident investigations, audits, and regulatory reviews.
• Develop the IAM team, coordinate specialist partners, and keep stakeholders informed about delivery priorities and risks.