> Markdown version of [/jobs/ext/4663961-principal-software-engineer-security](https://www.wearedevelopers.com/jobs/ext/4663961-principal-software-engineer-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Software Engineer - Security - **Company:** Radiant - **Location:** United Kingdom - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Audit Trail, Cloud Computing, Code Review, Cyber Security, Continuous Integration, Software Design Documents, Distributed Systems, Identity and Access Management, Intrusion Detection and Prevention, Key Management, Network Security, OAuth, OpenID, Role-Based Access Control, Zero Trust Network Access, Security Assertion Markup Language (SAML), Security Information and Event Management, Single Sign-On, Software Vulnerability Management, AI Infrastructure, Policy as Code, Cloud Platform System, Build Management, Kubernetes - **Published:** November 11, 2026 - **Apply:** https://startup.jobs/principal-software-engineer-security-radiant-10735849 ## About the Role * Strong hands-on engineering skills in one or more systems languages such as Go or similar. * Extensive experience building and operating large-scale distributed systems, with significant depth in cloud and network security, IAM, or security infrastructure. * A track record of technical leadership at staff or principal level, including setting direction across multiple teams and delivering complex, high-stakes systems. * Deep technical expertise across: * Identity & access: IAM, RBAC/ABAC, OAuth 2.0, OIDC, SAML, SSO, federation, mTLS, workload and service identity * Security controls: applied cryptography, encryption at rest and in transit, secrets management, KMS/HSM, key rotation, policy engines * Infrastructure: Kubernetes internals, containers and runtime isolation, cloud networking, compute, storage * Security operations: audit logging pipelines, detection engineering, vulnerability management, incident response * Automation: policy-as-code, infrastructure-as-code, CI/CD security, software supply chain (signing, SBOMs, provenance) * Hands-on experience with technologies such as Vault, OPA/Gatekeeper, SPIFFE/SPIRE, Kubernetes admission control and security tooling, Sigstore, SIEM platforms, cloud KMS, or similar. * Deep understanding of multi-tenancy, least privilege, zero-trust architecture, threat modelling, and shared-responsibility models. * Familiarity with compliance frameworks such as SOC 2 or ISO 27001, and how they translate into technical controls. * Able to balance security, performance, reliability, operational complexity, and developer experience. * Excellent written and verbal communication, including clear design documents and explaining complex trade-offs to technical and non-technical audiences. ## Description As a Principal Software Engineer - Security, you will help set the technical direction for Radiant's security capabilities across the cloud platform and infrastructure, leading the design and delivery of the systems that underpin them. You'll work across identity, access control, secrets, network security, platform hardening, auditability, and compliance controls. You'll partner closely with product, infrastructure, SRE, networking, security, and compliance teams, and with customers on their most demanding security requirements., * Set the technical vision and architecture for security systems and platform capabilities, and lead their design and implementation. * Design and build core security services across IAM, RBAC, workload identity, secrets, encryption and key management, audit logging, network controls, and policy enforcement. * Translate product, customer, and regulatory requirements into robust architectures, APIs, and technical designs, working closely with the Security Product Manager. * Drive automation of policy enforcement, configuration hardening, detection, remediation, and software supply chain security. * Ensure strong tenant isolation and least-privilege access across the control plane and network and data plane. * Act as a senior technical voice in enterprise customer security reviews, audits, and incident response. * Raise the security engineering bar across the organisation through mentoring, code review, and technical standards., * Security mindset: Think like an attacker and design systems that fail safely, without making them painful to use. * Engineering excellence: Write and review code that sets the standard for correctness, reliability, and maintainability. * Architectural judgement: Make sound long-term decisions on systems that are hard to change once built. * Technical leadership: Influence direction across teams without relying on authority, and grow the engineers around you. * Systems thinking: Understand how controls interact across the full cloud platform, from network and infrastructure up to APIs and user experience. * Ownership: Drive security capabilities from design through production, operation, and continuous improvement., * Open communication, regular feedback: we value smooth collaboration, direct and actionable feedback, and believe that leading with empathy and a growth mindset makes us better together. * Learning Time: we all have dedicated learning time to focus on new skills, projects or interests that lay outside of your day-to-day job. * Health & Wellbeing: we want everyone to feel healthy and happy, so we offer private medical insurance via Bupa. * Cycle to Work Scheme: we're committed to building a sustainable business, so we encourage cycling to work. * Gympass subscription to a variety of gyms and wellbeing apps * Participation in the company shares program * Enhanced parental pay & leave Our process: Talent screen * Hiring Manager * Technical interview (two Principal Engineers) * Whiteboard Session * Final.