About Man Group
Man Group is a global alternative investment management firm focused on pursuing outperformance for sophisticated clients via our Systematic, Discretionary and Solutions offerings. Powered by talent and advanced technology, our single and multi-manager investment strategies are underpinned by deep research and span public and private markets, across all major asset classes, with a significant focus on alternatives. Man Group takes a partnership approach to working with clients, establishing deep connections and creating tailored solutions to meet their investment goals and those of the millions of retirees and savers they represent.
Headquartered in London, we manage $253.6 billion* and operate across multiple offices globally. Man Group plc is listed on the London Stock Exchange under the ticker EMG.LN and is a constituent of the FTSE 250 Index. Further information can be found at www.man.com
At Man Group, we respect your privacy and we are committed to protecting and safeguarding your Personal Data. We have developed policies and processes which are designed to provide for the security and integrity of your Personal Data. We are committed to Processing your Personal Data fairly and lawfully, and being open and transparent about such Processing. For further information on how we process your data, please see the privacy notice for applicants here.
* As at 30 June 2026
The Team
Man Group’s business is powered by sophisticated technology with AI accelerating the next generation of transformation. Our technology stack is built on modern open-source components, both enabling day-to-day research and development, and supporting our 24hr trading.
With adoption of AI-agents we are investing in security as a first-class concern. Man has a sophisticated AI platform – MAIA – that offers the best foundation models on our modern technology stack. As agents become more powerful, the security platform which supports safe agentic workflows is critical.
The Senior Security Engineer will build and run the components that put these principles into practice: a policy engine and APIs that allows applications, AI agents and users to authenticate. This infrastructure will support authorisation with scoped short-lived credentials. This is a hands-on engineering role, securing Man's applications and services.
Role Responsibilities
Platform Engineering
- Design, build and operate security platform services and APIs such as policy decision, just-in-time access and short-lived credential issuance.
- Write and maintain policy-as-code that is tested, version-controlled and deployed through GitOps.
- Integrate the platform with identity providers (Entra/AD), secrets management (Vault) and existing internal infrastructure (Keycloak, Sailpoint).
- Run services to production standards for reliability, performance and observability, including 2nd line on-call support.
Enablement and Detection
- Provide Python APIs and onboard application teams and AI-agent developers to the platform, with documentation that make the secure path the easy one.
- Build logging, metrics and alerting for platform services, and contribute SIEM detection rules.
Key Competencies
Required
- Hands-on experience building and operating production services with Python.
- Using Kubernetes, Linux and containerised environments, including networking fundamentals and performance troubleshooting.
- Solid understanding of authentication, authorisation and secrets management (OIDC/OAuth, Azure AD/Entra ID, vault technologies).
- Experience with infrastructure-as-code (e.g., Terraform, Ansible, Helm) and GitOps-based deployment.
- Working knowledge of observability stacks (e.g., ELK, Prometheus, Grafana), including building dashboards and alerting rules.
- Clear communication and a structured approach to reasoning about risk.
Desirable
- Kubernetes knowledge beyond basic usage: network policies, pod security standards, admission controllers and resource quota enforcement.
- Policy engines and workload identity (e.g., OPA/Rego, Kyverno, Cedar, OpenFGA, SPIFFE/SPIRE, Envoy/service mesh).
- API design (REST/gRPC) for internal platform consumers.
- Network security controls: WAFs, segmentation, TLS termination and egress filtering.
Inclusion, Work-Life Balance and Benefits at Man Group
You'll thrive in our working environment that champions equality of opportunity. Your unique perspective will contribute to our success, joining a workplace where inclusion is fundamental and deeply embedded in our culture and values. Through our external and internal initiatives, partnerships and programmes, you'll find opportunities to grow, develop your talents, and help foster an inclusive environment for all across our firm and industry. Learn more at www.man.com/diversity.
You'll have opportunities to make a difference through our charitable and global initiatives, while advancing your career through professional development, and with flexible working arrangements available too. Like all our people, you'll receive two annual 'Mankind' days of paid leave for community volunteering.
Our comprehensive benefits package includes competitive holiday entitlements, pension/401k, life and long-term disability coverage, group sick pay, enhanced parental leave and long-service leave. Depending on your location, you may also enjoy additional benefits such as private medical coverage, discounted gym membership options and pet insurance.
Equal Employment Opportunity Policy
Man Group provides equal employment opportunities to all applicants and all employees without regard to race, color, creed, national origin, ancestry, religion, disability, sex, gender identity and expression, marital status, sexual orientation, military or veteran status, age or any other legally protected category or status in accordance with applicable federal, state and local laws.
Man Group is a Disability Confident Committed employer; if you require help or information on reasonable adjustments as you apply for roles with us, please contact [email protected].
Skills Required
- Hands-on experience building and operating production services with Python
- Experience using Kubernetes, Linux, and containerized environments
- Understanding of networking fundamentals and performance troubleshooting
- Understanding of authentication, authorization, and secrets management
- Experience with OIDC/OAuth, Azure AD/Entra ID, and vault technologies
- Experience with infrastructure-as-code tools such as Terraform, Ansible, or Helm
- Experience with GitOps-based deployment
- Working knowledge of observability stacks such as ELK, Prometheus, or Grafana
- Experience building dashboards and alerting rules
- Clear communication and a structured approach to reasoning about risk
- Advanced Kubernetes knowledge including network policies, pod security standards, admission controllers, or resource quota enforcement
- Experience with policy engines and workload identity such as OPA/Rego, Kyverno, Cedar, OpenFGA, SPIFFE/SPIRE, or Envoy/service mesh
- Experience designing REST or gRPC APIs for internal platform consumers
- Knowledge of WAFs, network segmentation, TLS termination, and egress filtering
What We Do
Man Group is a global active investment management firm, which runs $127 billion* of client capital in liquid and private markets, managed by investment specialists based around the world. Headquartered in London, the firm has 15 international offices and operates across multiple jurisdictions. Our business has five specialist investment engines, which represent the range of our capabilities: Man AHL, Man Numeric, Man GLG, Man FRM and Man GPM. These engines house numerous investment teams, working collaboratively within the framework of Man Group, with a high degree of investment autonomy. Each team benefits from the strength and resources of the firm’s single operating platform, enabling their primary focus to be seeking to generate alpha for clients. The teams invest across a diverse range of strategies and asset classes with highly specialised approaches, with long only and alternative strategies run on a discretionary and quantitative basis in single and multi-manager formats. Our clients are at the heart of everything we do and we engage in close dialogue with our investors as strategic partners, to understand their particular needs and constraints. Man Group’s investment teams are empowered and supported by our institutional infrastructure and technology, which aims to facilitate the efficient exposure to markets and effective collaboration across the organisation.
