Security Engineer

Mindbox connects top IT talents with technology projects for leading enterprises across Europe. The role is part of a transformational IAM programme delivering advanced identity services based on Zero Trust principles for a global financial institution.

• Proven experience in Information Security Engineering and Identity & Access Management.
• Strong knowledge of Zero Trust Architecture, authentication/authorization mechanisms, and Policy-as-Code (OPA).
• Expertise in PKI, certificate management, cryptography, and secrets management solutions.
• Hands-on experience securing cloud platforms (GCP) and Kubernetes workloads.
• Familiarity with Service Mesh Security, API Security, and DevSecOps tooling.
• Ability to conduct SSDLC activities, threat modelling, and vulnerability management.
• Understanding of security monitoring, SIEM, security compliance, and governance frameworks.
• Experience supporting incident response and risk management activities.

• Design and implement security controls for IAM services and platforms.
• Apply Zero Trust and Secure by Design principles across solution delivery.
• Configure secure authentication and authorization mechanisms.
• Implement service-to-service security using mTLS and manage secrets, PKI, and key rotation.
• Define and enforce Policy-as-Code solutions (OPA or related tools).
• Perform comprehensive threat modelling, security reviews of designs and code, and vulnerability assessments.
• Integrate robust cloud security for GCP and Kubernetes environments.
• Support cryptographic processes, certificate lifecycle, and privileged access controls.
• Conduct security risk assessments and assist with penetration testing and remediation.
• Implement monitoring, logging, and alerting for compliance and operational readiness.
• Contribute to DevSecOps practices and automated security testing pipelines.
• Produce clear standards, hardening guides, and operational security documentation.
• Provide guidance during security events in collaboration with Security Operations and Incident Response teams.