Senior Security Engineer

Job Description

Who We Are

\nAt BKN301, we build fintech solutions that enable banks, fintechs, and merchants to grow and innovate across emerging markets.

\nWere a London-based financial technology group, with offices in Milan (Italy), Doha (Qatar), and San Marino, and an international footprint thats rapidly expanding.

\nWe move fast, think globally, and act as one team transforming ideas into real, scalable fintech solutions every day.

\n

\nWhy Join Us

\nJoining BKN301 means becoming part of a fast-growing international fintech, where technology and people evolve together.

\nHere, every idea counts: youll have a tangible impact on strategic projects, learn continuously, and help build something meaningful from the ground up.

\nYoull join a company that values each persons contribution, gives space to experiment, and promotes an open approach to innovation because our success comes from the people who make it possible.

\n

\nYour Role

\nAs a Senior Security Engineer, you will design and implement secure, scalable Identity and Access Management (IAM) solutions for internal systems and for our clients who integrate with our BaaS platform. Your work will support mission-critical services in core banking, issuing, and acquiring while ensuring compliance with financial regulations like PSD2 and PCI/DSS. You will own these solutions end to end from architecture through to the Kubernetes and cloud platform they run on.

\n

\nA few examples of your responsibilities

\n\n Identity and Access Management (IAM): Develop and manage IAM solutions to secure access to internal systems, as well as client and provider integrations with our BaaS platform.\n Authentication Systems: Design and implement secure authentication mechanisms, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and passwordless login, tailored for internal and external users.\n Regulatory Compliance: Ensure IAM processes comply with financial regulations, including PSD2, SOC 2, PCI/DSS, and other relevant standards, enabling secure customer authentication and data privacy.\n Authorization Frameworks: Build and support robust role-based access control (RBAC) and attribute-based access control (ABAC) models to manage permissions for clients, providers, and internal users across a multi-tenant platform.\n Identity Federation: Deploy identity federation protocols such as SAML, OAuth2.0, and OpenID Connect to enable secure integration with third-party applications and services used by clients and providers.\n Platform Security: Secure our Kubernetes and Azure estate workload identity, network policy, admission control, secrets management, and least privilege enforced by default.\n Security as Code: Express controls as infrastructure-as-code and deliver them through GitOps, so that security posture is version-controlled, reviewable, and reproducible rather than manually applied.\n .NET Integration: Leverage .NET expertise to integrate IAM capabilities into our core systems, APIs, and microservices, supporting secure operations across our BaaS platform.\n Incident Response: Investigate and resolve security incidents related to identity or access breaches affecting internal systems, clients, or providers.\n Monitoring and Reporting: Implement and maintain monitoring and detection solutions to identify anomalous behaviours and generate comprehensive reports on identity activities.\n Collaboration: Work closely with engineering, DevOps, and compliance teams to embed IAM and security best practices across our products and services.\n\n

\nWhat Were Looking For

\n

\nEssential Requirements

\n\n Bachelors degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).\n 5+ years of experience in cybersecurity roles, with a focus on identity management.\n Hands-on experience with IAM technologies (e.g., Transmit, Okta, Azure AD, Ping Identity, ForgeRock) in multi-tenant SaaS environments.\n Strong knowledge of financial regulations like PSD2, especially its requirements for Strong Customer Authentication (SCA), and PCI/DSS.\n Deep understanding of identity federation protocols (SAML, OAuth2.0, OpenID Connect) and practical experience with token, scope, and key lifecycle management.\n Proficiency in .NET, with experience integrating IAM capabilities into .NET-based systems and APIs.\n Production experience securing Kubernetes workloads workload identity, RBAC, network policy, and image provenance.\n Hands-on experience with Azure (or AWS/GCP) security services and with infrastructure-as-code using Terraform or OpenTofu.\n Experience with directory services such as Microsoft Entra ID, Active Directory, and LDAP.\n Strong scripting and automation skills (e.g., Python, PowerShell).\n\n

\nNice to Have

\n\n Security certifications such as CISSP, CCSP, or identity-specific credentials (e.g. Azure Security Engineer Associate).\n Experience working in regulated industries, especially .