Job Description
About BTSE:
彼特思方舟 is a specialized service provider dedicated to delivering a full spectrum of front-office and back-office support solutions, each of which are tailored to the unique needs of global financial technology firms. 彼特思方舟 is engaged by BTSE Group to offer several key positions, enabling the delivery of cutting-edge technology and tailored solutions that meet the evolving demands of the fintech industry in a competitive global market.
BTSE Group is a leading global fintech and blockchain company that is committed to building innovative technology and infrastructure. BTSE empowers businesses and corporate clients with the advanced tools they need to excel in a rapidly evolving and competitive market. BTSE has pioneered numerous trading technologies that have been widely adopted across the industry, setting new benchmarks for innovation, performance, and security in fintech. BTSE’s diverse business lines serve both retail (B2C) customers and institutional (B2B) clients, enabling them to launch, operate, and scale fintech businesses. BTSE is seeking ambitious, motivated professionals to join our B2C and B2B teams.
About the opportunity:
We are looking for an Enterprise Security Engineer to manage and secure our enterprise identity and access management infrastructure. This role focuses on protecting enterprise systems, managing user identities, and ensuring secure access to corporate resources.
Responsibilities
- Enterprise Security Architecture & Strategy:
- -Acquire a thorough understanding of the organization's IT and information systems landscape
- -Lead security solutioning and design for enterprise IT systems, identifying gaps in existing security architecture and recommending changes or enhancements
- -Document and establish enterprise security architecture to improve the security posture of Windows, macOS, and mobile environments
- -Collaborate with application and infrastructure owners to define integration initiatives across all externally and internally-facing applications and systems
- -Plan architectural improvements and provide guidance to support developers, engineers, and analysts
- -Apply risk-based thinking to enable teams to make informed security decisions and prioritize effectively
- Identity & Access Management:
- -Ongoing support of IAM technologies, including single sign-on, multi-factor authentication, and user lifecycle management
- -Manage user account lifecycle end-to-end: provisioning, securing, access reviews, and deactivation in accordance with least-privilege principles
- -Implement and manage role-based access control (RBAC) strategies and integrations across enterprise applications
- -Conduct regular access reviews and certification campaigns to ensure compliance
- -Implement and manage privileged access management (PAM) solutions for administrative and service accounts
- Endpoint Security:
- -Deploy and maintain endpoint security tooling including mobile device management (MDM) and endpoint detection and response (EDR) capabilities
- -Administer productivity suite security configurations including data loss prevention, access controls, and email security policies
- Cloud & AWS Security:
- -Secure cloud infrastructure services including IAM policies, security groups, VPCs, and network access controls
- -Implement cloud security best practices around logging, monitoring, and alerting (e.g., CloudTrail, GuardDuty, Security Hub)
- -Enforce least-privilege access principles across cloud environments and review permissions regularly
- -Support cloud workload protection, encryption key management, and secure configuration baselines
Requirements:
- 5+ years of experience in enterprise security (Infrastructure/Endpoints)
- 3+ years of experience in AWS/Cloud Security Roles
- Experience with enterprise applications (architecture, development, support, and troubleshooting)
- Hands-on experience with IAM administration and SAML/OIDC integrations
- Familiarity with Google Workspace administration and security features
- Knowledge of Windows, MacOS and Linux Systems (System Administration/Security Hardening)
- Experience with PAM solutions
- Experience with MDM platforms
Nice to haves:
- Proficiency in scripting and automation languages (Bash, PowerShell, Python)
- Experience with Identity Governance and Administration (IGA) platforms
- Knowledge of Zero Trust architecture principles
- SCIM provisioning and automation experience
- Experience with conditional access policies and risk-based authentication
- Experience with web3 and blockchain technologies
- Relevant certifications: CISSP, CEH, AWS Certified Security Specialty, or equivalent
#LI-MC1
