IAM Platform Engineer Identity, Entitlements & Authorisation

IAM Platform Engineer Identity, Entitlements & Authorisation Overview

We are seeking a skilled IAM Platform Engineer to enhance our authentication, identity federation, credential management, and privileged access platforms. This role is crucial in modernizing our identity infrastructure, transitioning from bespoke authentication methods to scalable, standards-based IAM services that are secure and user-friendly for our engineering teams.

Key Responsibilities

• Take ownership of and evolve our authentication, identity federation, credential management, and privileged access platforms.
• Modernize identity infrastructure by replacing custom authentication patterns with scalable, standards-based IAM services.
• Improve Joiner, Mover, Leaver (JML) processes and organizational change workflows.
• Enhance identity lifecycle automation across Workday, IdentityIQ, and Active Directory.
• Build and maintain a comprehensive entitlement catalogue including ownership, business purpose, risk classification, approval models, and usage context.
• Refine access request workflows and access certification processes.
• Identify stale, orphaned, and excessive access rights.
• Engineer improvements to SailPoint IdentityIQ workflows, provisioning, and connectors.
• Reduce manual operational tasks through automation and self-service capabilities.
• Develop APIs and tools to expose identity and entitlement data.
• Create operational documentation, runbooks, and audit evidence.
• Support compliance, security reviews, and regulatory audits.
• Design and enhance modern entitlement models, including RBAC, ABAC, and policy-based access control.

Who Are We Looking For?

The ideal candidate will have experience in the following areas:

• Engineering and operating Identity Governance and Administration (IGA) platforms, ideally SailPoint IdentityIQ or an equivalent solution.
• Identity lifecycle management, including Joiner, Mover, and Leaver (JML) processes.
• Identity data integration with HR systems, ideally Workday.
• Active Directory, LDAP, and enterprise identity data management.
• Entitlement governance, including entitlement metadata, ownership, and access models.
• Access request, approval workflows, access reviews, certifications, and attestations.
• Identity provisioning and integration technologies, including SCIM, REST APIs, and SPML.
• Coding, platform configuration, and automation to improve identity services and reduce manual operational effort.
• Collaborating with engineering, security, and application teams to deliver scalable identity solutions.

Why Join Us?

• Highly competitive compensation plus annual discretionary bonus.
• Lunch provided via Just Eat for Business and dedicated barista bar.
• 35 daysâ?? annual leave.
• 9% company pension contributions.
• Comprehensive healthcare and life assurance.
• Cycle-to-work scheme.
• Monthly company events.
• Relocation support covering costs associated with your relocation and immigration.

Degree Requirement: Not Specified

Visa Sponsorship Promising