Senior Security Engineer

Who We Are\nAt BKN301, we build fintech solutions that enable banks, fintechs, and merchants to grow and innovate across emerging markets.\nWe’re a London-based financial technology group, with offices in Milan (Italy), Doha (Qatar), and and San Marino, and an international footprint that’s rapidly expanding.\nWe move fast, think globally, and act as one team — transforming ideas into real, scalable fintech solutions every day.\n\nWhy Join Us\nJoining BKN301 means becoming part of a fast-growing international fintech, where technology and people evolve together.\nHere, every idea counts: you’ll have a tangible impact on strategic projects, learn continuously, and help build something meaningful from the ground up.\nYou’ll join a company that values each person’s contribution, gives space to experiment, and promotes an open approach to innovation — because our success comes from the people who make it possible.\n\nYour Role\nAs a Senior Security Engineer, you will design and implement secure, scalable Identity and Access Management (IAM) solutions for internal systems and for our clients who integrate with our BaaS platform. Your work will support mission-critical services in core banking, issuing, and acquiring while ensuring compliance with financial regulations like PSD2 and PCI/DSS.\n\nA few examples of your responsibilities\nIdentity and Access Management (IAM): Develop and manage IAM solutions to secure access to internal systems, as well as client and provider integrations with our BaaS platform.\nAuthentication Systems: Design and implement secure authentication mechanisms, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and passwordless login, tailored for internal and external users.\nRegulatory Compliance: Ensure IAM processes comply with financial regulations, including PSD2, SOC 2, PCI/DSS, and other relevant standards, enabling secure customer authentication and data privacy.\nAuthorization Frameworks: Build and support robust role-based access control (RBAC) and attribute-based access control (ABAC) models to manage permissions for clients, providers, and internal users.\nIdentity Federation: Deploy identity federation protocols such as SAML, OAuth2.0, and OpenID Connect to enable secure integration with third-party applications and services used by clients and providers.\nCustom IAM Solutions: Collaborate with product and engineering teams to design and implement customized IAM solutions for clients and providers, ensuring seamless integration with their financial workflows.\nJava Integration: Leverage Java expertise to integrate IAM solutions into our core systems, APIs, and microservices, supporting secure operations across our BaaS platform.\nIncident Response: Investigate and resolve security incidents related to identity or access breaches affecting internal systems, clients, or providers.\nMonitoring and Reporting: Implement and maintain monitoring solutions to detect anomalous behaviors and generate comprehensive reports on identity activities.\nCollaboration: Work closely with engineering, DevOps, and compliance teams to embed IAM best practices across our products and services.\n\nWhat We’re Looking For\n\nEssential Requirements\nBachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).\n5+ years of experience in cybersecurity roles, with a focus on identity management.\nHands-on experience with IAM technologies (e.g., Transmit, Okta, Azure AD, Ping Identity, ForgeRock) in multi-tenant SaaS environments.\nStrong knowledge of financial regulations like PSD2, especially its requirements for Strong Customer Authentication (SCA), and PCI/DSS.\nProficiency in Java, with experience integrating IAM capabilities into Java-based systems and APIs.\nDeep understanding of identity federation protocols (SAML, OAuth2.0, OpenID Connect).\nExperience with directory services like Active Directory, Azure AD, and LDAP.\nFamiliarity with cloud security solutions in AWS, Azure, or GCP, particularly IAM services.\nStrong scripting skills (e.g., Python, PowerShell) for automation.\n\nNice to Have\nSecurity certifications such as CISSP, CCSP, or certifications specific to identity management (e.g., Okta Certified Professional, Azure Security Engineer Associate).\nExperience working in regulated industries, especially fintech or banking.\nFamiliarity with Zero Trust Architecture principles.\nExperience implementing IAM solutions in multi-tenant, API-first platforms like BaaS.\nExperience in the .NET stack.\n\nSoft Skills That Make a Difference\nStrategic thinking with a bias for action.\nStrong analytical and problem-solving skills.\nOwnership and accountability.\nAbility to adapt to evolving regulatory and technological landscapes.\nStrong communication and collaboration skills to engage with technical and non-technical stakeholders, including clients and providers.\nCuriosity, adaptability, and passion for innovation.\n\nWhat We Offer\nPermanent, full-time role.\nA fair and market-aligned compensation.\nDynamic, international culture built on trust and collaboration.\nReal impact on global fintech transformation projects.\nGrowth and learning opportunities within an innovative group.\n\nOur Selection Process\nHR Introduction: A friendly chat with our HR team.\nHiring Manager Interview: Discuss your experience and vision.\nTechnical Evaluation: Show us your expertise.\nTeam Fit Discussion: Ensure mutual alignment with our culture.\n\nEvery selection process is an opportunity for mutual discovery and shared growth.\n\nDiversity & Inclusion\nAt BKN301, we believe innovation thrives when different perspectives meet.\nWe’re proud to be an equal opportunity employer, committed to diversity and inclusion in all forms.\n\nReady to lead our next phase of growth and operational excellence?\nApply now or reach out to