Senior Security Specialist (IAM)

Senior Security Specialist (IAM)

The Team

The Information Security team at Deliveroo is crucial for ensuring that our consumer, rider and restaurant partners trust our platform and for delivering a highly available service to our customers. Our Cybersecurity Strategy recognises our desire to be a recognised class leader for Information Security and we are committed to the investment needed to reach that goal.

We're looking for a Senior Security Specialist (IAM) to join our team, who is passionate about building and maintaining the services used to manage access to our key systems. You will be part of a team driving significant maturity improvements in the Identity and Access Management services we provide to the organisation.

You will report into the Senior Manager for Identity and Access Management within the Information Security Function. 

This is a hybrid role, requiring 3 days a week in the office in Hyderabad.

What you'll do

• Design, implement and manage our key identity systems that enhance the security of Deliveroo's services, including our identity provider services, identity governance and administration (IGA) services and non-human identities (secrets) across our business.
• Conduct access recertification campaigns across our systems to ensure we maintain a robust security posture.
• Design IAM architecture with best practices against relevant standards, and create comprehensive documentation for IAM architectures, processes, and configurations.
• Identify gaps in IAM capabilities and drive improvements for user efficiency and security.
• Provide standard patterns, guidance, and technical standards supporting the delivery of IAM solutions and controls.
• Collaborate across the business to identify roles, permissions, and access requirements. Challenge stakeholders where these systems aren’t in alignment with our standards.
• Develop and implement Role-based Access Control (RBAC) policies, models and guidelines that align with best practice.
• Review and improve the user lifecycle management processes to enhance the user experience and bolster security.
• Take ownership to resolve issues related to identities, systems access, accounts, authentication, authorisation, entitlements, and permissions - whilst producing guides, tooling and sharing knowledge to empower our Service Desk where possible.

Required Experience

• 7+ years' experience in Identity and Access Management technologies and systems, including protocols such as SSO/SAML, OAuth/OIDC, SCIM and 2-step verification
• Experience using systems including Google Cloud Identity and Active Directory, AzureAD, Okta, Sailpoint, Saviynt.
• Expert knowledge of IAM architecture and integrations.
• Experience with best practices relating to the management of non-human identities (Secrets/API Keys)
• Expert knowledge in IAM processes and controls including identity lifecycle management, RBAC, access request and fulfilment, access governance, SoDs controls and Privileged Access Management (PAM).
• Knowledge and experience using GCP or AWS.
• Knowledge of relevant scripting and automation technologies
• Knowledge of zero trust security model components and related software products (for example Google's BeyondCorp Enterprise)
• Experience working in hyperscale developer-driven environments is advantageous, but not a requirement.  
   

Why Deliveroo

Our mission is to transform the way you shop and eat, bringing the neighbourhood to your door by connecting consumers, restaurants, shops and riders. . We are transforming the way the world eats and shops by making access to food and products more convenient and enjoyable. We give people the opportunity to buy what they want, as they want it, when and where they want it.

We are a technology-driven company at the forefront of the most rapidly expanding industry in the world. We are still a small team, making a very large impact, looking to answer some of the most interesting questions out there. We move fast, value autonomy and ownership, and we are always looking for new ideas.

Workplace & Benefits

At Deliveroo we know that people are the heart of the business and we prioritise their welfare. Benefits differ by country, but we offer many benefits in areas including healthcare, well-being, parental leave, pensions, and generous annual leave allowances, including time off to support a charitable cause of your choice. Benefits are country-specific, please ask your recruiter for more information.

Diversity

At Deliveroo, we believe a great workplace is one that represents the world we live in and how beautifully diverse it can be. That means we have no judgement when it comes to any one of the things that make you who you are - your gender, race, sexuality, religion or a secret aversion to coriander. All you need is a passion for (most) food and a desire to be part of one of the fastest-growing businesses in a rapidly growing industry.

We are committed to diversity, equity and inclusion in all aspects of our hiring process. We recognise that some candidates may require adjustments to apply for a position or fairly participate in the interview process. If you require any adjustments, please don't hesitate to let us know. We will make every effort to provide the necessary adjustments to ensure you have an equitable opportunity to succeed.