Security Engineer - Identity and Access Management (IAM)

« Back to Jobs

Security Engineer - Identity and Access Management (IAM)

Allica Bank | Milton Keynes, ENG, GB

Posted 20 days ago

Apply Now

Description


  • Operate and maintain IAM services, including user lifecycle management, access requests, provisioning, deprovisioning and access changes across Microsoft Entra ID and integrated applications

  • Manage identity governance and access controls, including RBAC, least-privilege access, Conditional Access and PIM

  • Manage access reviews and certifications, including reviewer engagement, evidence collection, exception handling, remediation tracking and reporting

  • Onboard and integrate applications into IAM/IGA, including SSO, SAML/OIDC, SCIM provisioning and secure authentication using Microsoft Entra ID

  • Support application and vendor onboarding from an IAM perspective

  • Maintain IAM controls and audit evidence for internal and external audits and regulatory requirements

  • Deliver improvements through automation, improved workflows, better request processes, clearer ownership and enhanced reporting

  • Support identity-related issues and investigations with application owners, Technology, Security and other stakeholders

  • Maintain IAM documentation and operational standards, including process guides, access models, onboarding standards, control evidence and runbooks

  • Support Azure identity, access management and security controls, credential lifecycle management, and Google Cloud IAM governance, engineering and automation

  • Report IAM risks, control status, work in progress, blockers and remediation actions to Security leadership

  • Support related control and regulatory activities, including Risk Smart Indicators and Data Subject Access Requests


Requirements



  • Experience in Identity and Access Management, Security Operations, Cloud Security or technical operations, ideally within a regulated or control-focused environment

  • Good hands‑on knowledge of Microsoft Entra ID and Azure identity, access management and security controls, including users, groups, Enterprise Applications, SSO, Conditional Access, Privileged Identity Management and access management controls

  • Understanding of IAM principles and controls, including least privilege, RBAC, privileged access, joiner/mover/leaver processes and segregation of duties

  • Experience supporting access reviews, remediation, audit evidence and operational controls

  • Experience balancing BAU operational work with hands‑on engineering, including improving processes, writing or adapting scripts, documenting workflows and automating repeatable tasks

  • Experience with Microsoft Entra Identity Governance, Conditional Access, PIM, access reviews and Enterprise Applications

  • Experience with Microsoft Graph, PowerShell, Logic Apps, Azure Functions or similar automation tooling

  • Experience with Azure identity, access management and security controls

  • Experience with SAML, SCIM, OAuth, OpenID Connect, SSO onboarding and secure provisioning patterns

  • Experience with Google Cloud Platform IAM governance, access models, engineering standards and automation

  • Experience with 1Password or similar credential management platforms

  • Experience with cloud audit logging and identity monitoring

  • Experience with service desk and IT workflow platforms

  • Able to work with application owners, Technology, Security, suppliers and non‑technical stakeholders

  • Strong analytical and problem‑solving skills

  • Clear written and verbal communication skills in plain English

  • Understands effective, auditable controls in an FCA/PRA‑regulated environment


Core Competencies


Demonstrates expertise in Identity and Access Management (IAM) with a focus on Microsoft Entra ID, Azure identity controls, and automation of IAM processes. Proficient in managing access governance, conducting access reviews, and ensuring compliance with regulatory standards.


Highest‑signal resume keywords



  • Identity And Access Management

  • Microsoft Entra ID

  • Azure Identity Management

  • Access Reviews

  • Automation Tools


Hard Skills



  • User Lifecycle Management

  • Role‑Based Access Control

  • Privileged Identity Management

  • SAML

  • SCIM

  • OAuth

  • OpenID Connect

  • Microsoft Graph

  • PowerShell

  • Cloud Security


Soft Skills



  • Analytical Skills

  • Problem‑Solving Skills

  • Clear Communication


Industry Keywords



  • Regulated Environment

  • Audit Evidence

  • Access Controls

  • Data Subject Access Requests

  • FCA/PRA Compliance


Tools & Technologies



  • Microsoft Entra Identity Governance

  • Azure Functions

  • Logic Apps

  • 1Password

  • Service Desk Platforms


#J-18808-Ljbffr