Head of Core Services Engineering (Identity & Network Security)

Location: London, United Kingdom; hybrid, with a minimum of three days per week in the London office

Company

hirify.global is a global leader in financial administration with more than 11,000 employees across over 22 countries.

What you will do

• Define and lead the global strategy, standards, and multi-year roadmap for core infrastructure services and network security.
• Act as design authority by establishing reference architectures, approved patterns, engineering standards, and reusable frameworks.
• Lead the engineering and lifecycle management of DNS, DHCP, IPAM, network time, secure access, identity, privileged access, PKI, cryptography, load balancing, monitoring, and related tier-0 services.
• Own budgets, investment cases, licenses, renewals, hardware lifecycles, support contracts, and strategic vendor relationships.
• Lead audit, control testing, disaster recovery, and remediation across identity, access, and core network controls.
• Build and develop distributed engineering teams across EMEA, North America, and Australia, promoting automation, accountability, reliability, and continuous improvement.

Requirements

• Extensive experience leading identity or core infrastructure services in a large, regulated, and geographically distributed organization.
• Deep knowledge of DNS, DHCP, IPAM, DDI platforms, and resilient network-time architectures.
• Strong experience with secure access and web security technologies, including SASE/SSE, Zscaler, proxy, WAF, load balancing, and application delivery.
• Architecture-level understanding of Active Directory, Microsoft Entra ID, hybrid identity, conditional access, federation, and modern authentication protocols.
• Experience with privileged access management and identity governance platforms, including or comparable to CyberArk and SailPoint.
• Knowledge of zero trust architecture, MFA, FIDO2/passkeys, certificate-based authentication, device trust, and risk-based access controls.
• Strong understanding of PKI, HSMs, certificate lifecycle automation, cryptographic standards, and emerging post-quantum requirements.
• Experience integrating monitoring and observability platforms with SIEM, IT service management, and configuration-management capabilities; experience with agile delivery, product roadmaps, prioritized backlogs, and service management.
• Commercial expertise in financial modeling, TCO analysis, vendor management, contract negotiation, and SLA management, plus excellent communication and influencing skills for executive, risk, technical, and business audiences.

Nice to have

• CISSP, CISM, CCSP, or equivalent security qualification.
• CyberArk, SailPoint, or Ping Identity certification.
• Zscaler, Cisco, F5, or Infoblox certification.

Culture & Benefits

• Hybrid work with flexibility to work from home for part of the week.
• Health and wellbeing rewards that can be tailored to support employees and their families.
• Salary sacrifice share-purchase scheme with a company contribution.
• Additional recognition rewards, team events, and support for investing in the future.
• Open, inclusive, and close-knit culture with development opportunities and diverse global career paths.