IAM Engineer – Privileged Access & Secrets Management

Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager, operating in all liquid asset classes across the world. We are a technology and data driven group implementing a scientific approach to investing. Combining data, research, technology, and trading expertise has shaped QRT’s collaborative mindset which enables us to solve the most complex challenges. QRT’s culture of innovation continuously drives our ambition to deliver high quality returns for our investors.

You will join the Identity and Access Management team, responsible for safeguarding QRT’s systems and data by managing authentication, authorization, and privileged access controls. The team works closely with infrastructure, application, and security specialists to enforce least privilege principles and maintain compliance with security standards.

• Lead the deployment, configuration, and operation of PAM tools (e.g., CyberArk, BeyondTrust).Define and enforce policies for privileged account usage, session monitoring, and credential rotation.
  Collaborate with system owners to onboard privileged accounts and enforce least privilege principles.
  Monitor and audit privileged access activities, investigate anomalies, and support incident response.
  Maintain documentation and evidence for internal and external audits related to privileged access.

• Implement and manage secrets management platforms (e.g., HashiCorp Vault, AWS Secrets Manager).
• Define secure storage, access, and rotation policies for application secrets, API keys, and credentials.
• Integrate secrets management tools with CI/CD pipelines, cloud platforms, and enterprise applications.
• Ensure secrets are managed in accordance with regulatory and internal security requirements.

• Support role-based access control (RBAC) implementation across Active Directory and cloud environments.
• Remediate and maintain AD group structures to align with access policies.
• Collaborate with IT and application teams to enforce authentication and authorization standards.

• Assist in periodic access reviews and privileged account certifications.
• Ensure PAM and secrets management practices align with ISO 27001, GDPR, and other regulatory frameworks.
• Contribute to audit readiness and provide evidence for compliance assessments.

• 5+ years of experience in identity and access management with focus on PAM and secrets management
• Hands-on expertise with CyberArk, HashiCorp Vault, or similar platforms
• Experience with cloud platforms (AWS, Azure) and their native IAM/secrets services
• Strong understanding of RBAC, authentication protocols (SAML, OAuth), and directory services
• Proficiency in scripting (e.g. PowerShell, Python) for automation and integration
• Familiarity with compliance frameworks such as ISO 27001 and GDPR
• Strong communication and documentation skills
• Relevant certifications (CyberArk Defender, HashiCorp Vault Associate, CISSP, CISM) are an advantage

 QRT is an equal opportunity employer. We welcome diversity as essential to our success. QRT empowers employees to work openly and respectfully to achieve collective success. In addition to professional achievement, we are offering initiatives and programs to enable employees achieve a healthy work-life balance.