Head of Identity (Security Engineering)

Tide's Security Engineering team is made up of three core areas: Product Security, Identity, Threat Detection & Response.

Product Security consists of application and cloud security experts. Their mission is to protect the products we build, covering everything from secure design reviews to threat modelling and penetration testing, ensuring security is embedded from the ground up.

Threat Detection & Response focuses on protecting the company by building a robust detection and automation platform. We’re proactive in our defence, constantly hacking ourselves to improve our security posture and staying ahead of emerging threats. Our goal is to make Tide resilient against the ever-evolving threat landscape.

Identity (the area this role will lead!) is responsible for Identity across Tide. Everything from managing Okta to provisioning modern access control patterns for newly deployed applications is within scope of this team. The team uses strategies like zero trust, Just-in-Time access, and granular access controls to safeguard our internal operations.

While each area has its own focus, collaboration is key – it's why we share the same Slack channel and hold our standups together as one cohesive team, ensuring alignment and seamless communication across all security functions.

As the Head of Identity, you will own Tide’s entire Identity strategy and execution. You will define how access is designed, governed, and automated across all systems, applications, and cloud environments. This is a highly hands-on leadership role, blending strategic direction with deep technical delivery across the Identity stack.

As the Head of Identity, you’ll be:

• Own and lead Tide’s Identity strategy end-to-end, ensuring secure, scalable, and automated access across all systems and environments.
• Set and enforce enterprise standards for authentication, authorisation, and access governance aligned with Zero Trust and least-privilege principles.
• Own and mature Tide’s Identity ecosystem (Okta and related tooling), ensuring strong governance and continuous modernisation.
• Integrate applications and implement advanced access controls, including just-in-time access and granular entitlements.
• Shape architectural decisions across authentication, authorisation, and identity lifecycle management.
• Deploy modern access controls (e.g., phishing-resistant MFA) and evaluate emerging identity technologies.
• Drive automation-first identity operations, eliminating manual workflows through IaC and policy-as-code.
• Partner with senior technology and business leaders to embed identity as a core enabler of security and operational efficiency.
• Lead and develop the Identity Engineering team, driving high performance and engineering excellence.
• Serve as Tide’s authority on Identity, uplifting best practices and strengthening the company’s security posture.

• 10+ years’ experience in Identity Engineering / IAM, with a strong record of delivering enterprise-scale identity initiatives.
• Ability to define and execute Identity strategies and lead high-performing technical teams.
• Expert-level hands-on experience with modern IDPs (Okta preferred or similar), including complex integrations, federation, and platform governance.
• Deep understanding of OAuth 2.0, OIDC, SAML and strong architectural judgment across authentication and authorisation.
• Terraform expertise is essential, with the ability to design and maintain Identity infrastructure using Infrastructure-as-Code.
• Scripting/programming capability is mandatory, with experience automating identity workflows and solving complex lifecycle challenges.
• Hands-on experience implementing Zero Trust, least privilege, just-in-time access models, and granular entitlements.
• Strong leadership and mentoring capability, elevating engineering quality and team performance.
• Exceptional communication and stakeholder management, with the ability to influence senior leaders and simplify complex topics.
• A strong ownership mindset, combining strategic vision with hands-on delivery to achieve measurable outcomes.

Our location-specific employee benefits are designed to cater to the unique needs of Tideans: 

• Competitive Compensation -  competitive salary and share options.
• Time Off – Generous annual leave on top of bank holidays.
• Parental Leave – Paid maternity, paternity, and adoption leave to support your family journey.
• Sabbatical – Extended unpaid and paid leave options after completing milestone years with Tide.
• Health Insurance – Private family insurance with additional OPD coverage and top-up options.
• Life & Accident Cover – Comprehensive accidental and life insurance protection.
• Mental Wellbeing – Access to therapy sessions, courses, meditations, and workshops.
• Volunteering & Development Days – Paid days annually for volunteering or personal growth.
• Learning & Development – Annual budget for books, courses, coaching, and more.
• WOO (Work Outside the Office) – Work from abroad for up to 90 days annually.
• Home Office Setup – Contribution towards setting up your home office
• Laptop Ownership – Keep your old laptop and get a new one when it’s time for a replacement.
• Snacks & Meals – Office perks with snacks, coffee, tea, and lunch (location dependent).

At Tide, we champion a flexible workplace model that supports both in-person and remote work to cater to the specific needs of our different teams. 

While remote work is supported, we believe in the power of face-to-face interactions to foster team spirit and collaboration. Our offices are designed as hubs for innovation and team-building, where we encourage regular in-person gatherings to foster a strong sense of community. #LI-AC1 #LI-Hybrid