Manager - Identity & Access Management Engineering

Job Purpose:

The Manager - Identity & Access Management (IAM) Engineering will be responsible for leading the design, implementation, and optimisation of enterprise-wide identity and access management solutions. This role ensures secure, seamless, and compliant access to systems and applications by managing authentication, authorisation, and identity lifecycle processes. The position oversees the engineering of IAM and Privileged Access Management (PAM) technologies, Identity Providers (IdPs), and modern authentication protocols, driving initiatives that strengthen organisational security posture, reduce risk, and enable business agility.

The role holder will lead and participate in projects and initiatives to work with other architecture, development and engineering teams, service owners, and business stakeholders to provide consensus-based enterprise Identity & Access Management solutions that are scalable and adaptable to the ever-changing business needs and industry demands. This role is vital as it directly influences the organization's cybersecurity posture, ensuring that identity and access management processes and solutions align with the overall business objectives and regulatory requirements. The role holder will play a key part in safeguarding the organization's digital assets and maintaining trust with stakeholders.

This role will report to Head of Cybersecurity Engineering and have a responsibility to influence cyber security strategy cross-functionally and must do so with a high degree of integrity, sound judgment, as well as domain competency in the field of information security.

Key Responsibilities:

Strategic

• Work with CISO and Head of Cybersecurity Engineering to define and maintain the organisation's Identity and Access Management roadmap focusing primarily on the design and technical engineering aspect of IAM.
• Assess emerging IAM technologies, authentication methods and recommend adoption strategies.
• Ensure IAM Solutions meet regulatory requirements and collaborate with senior leadership, architects, and application owners to align IAM initiatives with enterprise goals.

Operational and Technical

• Lead the design, deployment, and maintenance of Identity and Access Management Solutions
• Configure and manage Identity Providers (IdPs), Single Sign-On (SSO), MFA, and modern protocols (OAuth, SAML).

• Deploy and maintain PAM solutions for secure management of privileged accounts and sessions.
• Manage integration with Active Directory, Entra ID, LDAP, and cloud identity platforms.
• Automate periodic access reviews and certification processes to ensure least privilege.
• Support the Cyber Defence Center to investigate and resolve identity-related security incidents, including compromised accounts and privilege escalations.
• Develop scripts and workflows for automating IAM tasks (e.g., onboarding/offboarding)
• Ensure IAM and PAM systems are hardened and regularly patched against vulnerabilities.
• Support the integrations of IAM, PAM and other identity related solutions to SIEM.
• Maintain detailed technical documentation, runbooks, and configuration standards.
• Document and provide technical guidance and training to IAM engineers and support teams.
• Communicate aspects of both the product and the implementation at the technical and functional level appropriate for the solution.
• Manage production issues and incidents and participate in problem and change management forums.
• Build complete enterprise Role Based Access Control (RBAC) for internal and cloud systems authentication to entitled applications and resources.
• Provide support and guidance for legal and regulatory compliance efforts, including audit support.
• Drive the adoption of strong Authentication and Authorization architecture for existing, new, and emerging Identity & Access Management technologies.
• Work with technology and security teams to make sure security is included when evaluating, choosing, and setting up Identity & Access Management for cloud infrastructure, applications, services, and software.
• Work with the technology architecture team to ensure that there is a convergence of business, technical and security requirements; liaise with technology management to align existing technical installed base and skills with future architectural requirements.
• Develop a strong working relationship with the security engineering team to develop and implement controls and configurations aligned with security policies and legal, regulatory and audit requirements.
• Coordinate, measure and report on the technical aspects of Identity & Access Management.
• Manage outsourced vendors that provide information security functions for compliance with contracted service-level agreements.

Looking to get Placed? Try our Placement Guarantee Plan

Get Hired
• Manage and coordinate daily operational components of user provisioning, de-provisioning, and role changes.
• Manage the day-to-day activities of Identity & Access Management, identify business requirements, recommend solution plans, and communicate information about residual risk if any.
• Regularly review audit trails, system logs, and other monitoring data sources to ensure they meet policy guidelines and audit requirements.
• Maintain an Identity & Access Management knowledgebase comprising a technical reference library, security advisories and alerts, information on security trends and practices, and laws and regulations.

Key Skills, Qualifications & Experience:

• Minimum 6+ years of progressive experience in Identity & Access Management (IAM) and Privileged Access Management (PAM) engineering within enterprise environments
• Bachelor's degree in computer science, cybersecurity, information systems, or equivalent work experience; an M.B.A. or M.S. in information security (preferred).
• Preferred certifications such as SailPoint Certified Identity Engineer/Administrator, CyberArk Defender/Sentry/ or Guardian Certification
• Preferred Microsoft Certified: Identity and Access Administrator Associate.
• Preferred Blockchain and/or Web3 security certification.
• Proven expertise in: (i) IAM Platforms: SailPoint IdentityIQ/IdentityNow, Okta, Ping Identity, Microsoft Identity Manager (ii) PAM Solutions: CyberArk, BeyondTrust, Thycotic. (iii) Authentication & Federation Protocols: SAML, OAuth 2.0, OpenID Connect, Kerberos. (iv) Directory Services: Active Directory, Entra ID, LDAP
• Experience in designing and deploying enterprise Identity and Access Management (IAM) architectures within hybrid and multi-cloud environments, including AWS and Azure.
• Hands-on experience in automation and orchestration for identity lifecycle management using scripting (PowerShell, Python) and APIs
• Hand-on experience in securing non-human identities and secrets in CI/CD pipelines and DevOps workflows.
• Technical architecture experience integrating identity management, access management and access governance software into infrastructure and applications.
• Knowledge and familiarity with the Software Development Life Cycle
• Knowledge and understanding of complex enterprise systems and frameworks including frontends, middleware, services layer, database, backend and downstream interfaces