Senior Security Engineer

The Directory Services Security Team (DSST) who handle and control privileged groups and accounts, various project workstreams and the overall security posture of the active directory and other LDAP environments, are looking for a Security Engineer specialising in EntraID.

You will need to have a good understanding of the technologies used for the implementation of security initiatives and standards. You will have proven experience in developing, maintaining, advising, and hardening operating systems and common applications.

You will possess validated skills including solutions design, problem solving and resolution, PowerShell scripting, documentation, be an excellent communicator and should be able to take care of all levels of seniority.

You'll demonstrate a strong analytical ability, attention to detail, and a willingness to develop expertise in identity security within a structured governance environment. It is a highly focused, security centric role. We proactively prevent and resolve vulnerabilities on servers and the Entra ID tenants and on premises Active Directories in the Group.

Day-to-day activities include

• Support the identification and remediation of security vulnerabilities within Microsoft Entra ID.
• Assist in implementing and supervising Privileged Identity Management (PIM) and Privileged Access Management (PAM) controls.
• Support enforcement of Security Group governance and Privileged Access Workstation (PAW) standards.
• Assist with secure hybrid identity configurations, including Password Hash Synchronisation (PHS).
• Support monitoring, logging and reporting of privileged access activity.
• Maintain technically accurate documentation for identity security controls and remediation tasks.
• Assist with tracking remediation activities across Azure DevOps and ServiceNow.
• Participate in CAB (Change Approval Board) discussions and governance reviews relating to identity security changes.

Critical Skills

Extensive hands-on experience with Microsoft Entra ID (Azure AD) in a sophisticated enterprise environment.

Strong expertise in Entra ID PIM including role-based and group-based governance.

Proven experience implementing and securing PAM controls.

Demonstrable experience preventing privileged self-activation and privilege issue pathways, including security group misuse.

Strong understanding of Zero Trust architecture, with Least Privilege principles and tiered administrative models.

Experience securing hybrid identity environments, including Password Hash Synchronisation (PHS) and identity hardening controls.

Experience making sure PAW standards are correctly applied.

Solid understanding of identity-related attack vectors and mitigation strategies.

Excellent PowerShell scripting skills for automation, reporting and bulk remediation.

Experience with ServiceNow  or another ITSM product for identity ticket reporting and governance tracking.

Experience using Azure DevOps (ADO) or similar tools for task and remediation management.

Strong reporting capability using advanced Excel (Pivot tables, structured reporting) and/or Power BI.

Experience working within structured change management and CAB processes

Diversity & Inclusion

People are at the heart of what we do and drive the success of our business. Our colleagues thrive personally and professionally through our shared values of Integrity, Partnership, Innovation and Excellence are at the core of our culture. We embrace diversity and actively seek to attract people with unique backgrounds and perspectives. We are always looking at ways to become more agile, so we meet the needs of our teams and customers. We believe that an inclusive collaborative workplace is pivotal to our success and supports the potential and growth of all colleagues at LSEG

Proud to share LSEG in the India is Great Place to Work certified (Jun ’25 – Jun ’26).

Learn more about life and purpose of our company directly from India colleagues’ video: Bengaluru, India | Where We Work | LSEG

Career Stage:

Senior Associate

London Stock Exchange Group (LSEG) Information:

Join us and be part of a team that values innovation, quality, and continuous improvement. If you're ready to take your career to the next level and make a significant impact, we'd love to hear from you.

LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth.

Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership, Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions.

Working with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce.

We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone’s race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.

You will be part of a collaborative and creative culture where we encourage new ideas. We are committed to sustainability across our global business and we are proud to partner with our customers to help them meet their sustainability objectives. Our charity, the LSEG Foundation provides charitable grants to community groups that help people access economic opportunities and build a secure future with financial independence. Colleagues can get involved through fundraising and volunteering.

LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.

Please take a moment to read this privacy notice carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it’s used for, and how it’s obtained, your rights and how to contact us as a data subject.

If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.