Cyber Security IdAM Senior Specialist

Based at least 2 days a week in our Bath Head Office as our new Cyber Security IdAM Senior Specialist, you will report to the Cyber Security Engineering Team Leader. You will develop the Cyber Security Identity and Access Management (IdAM) functions, deliveries and continuous improvement of identity security across the organisation.

You will ensure identity security operates as a strategic control pillar rather than a reactive support function.

The Cyber Security IdAM Senior Specialist drives the operational effectiveness, resilience and continuous improvement of the organisation's Identity and Access Management capabilities. The role ensures robust access control, secure authentication standards and regulatory alignment across on-premises, cloud and hybrid environments.

It provides senior technical authority in identity security, working across IT, security, governance and business teams to embed best practice, reduce identity-related risk exposure and enhance the organisation's overall security posture.

In particular, you will:

• investigate and resolve identity-related security incidents, including unauthorised access, privilege misuse and credential compromise
• develop and refine SIEM detection use cases and identity-centric analytics to enable earlier identification and containment of threats
• drive adoption of evolving identity security practices, including Zero Trust principles, modern authentication standards and identity analytics
• deliver roadmap enhancements to ensure IdAM capabilities remain aligned to the threat landscape and business risk profile
• where designated, act as technical service owner for key security platforms, ensuring performance, resilience and continual optimisation
• oversee monitoring and analysis of identity telemetry, authentication patterns and privilege usage to detect anomalous behaviour and systemic risk
• provide clear, risk-focused reporting and recommendations to senior management, supporting informed decision-making and prioritisation of remediation efforts
• provide authoritative identity security input into projects, architectural design reviews and technology implementations
• ensure new systems, integrations and application deployments align with enterprise authentication, authorisation and lifecycle standards
• maintain and continuously improve secure configuration baselines across identity infrastructure, including both cloud and on-premise environments
• lead optimisation and hardening of enterprise IdAM platforms, including privileged access controls, identity governance and directory security
• oversee access governance activities, including periodic access reviews, privilege rationalisation and enforcement of least-privilege principles
• identify and remediate systemic identity risk through conditional access enforcement, legacy protocol reduction, authentication strengthening and directory security enhancement
• produce and maintain high-quality documentation, including standards, procedures, runbooks and post-incident reports
• provide identity risk metrics and performance insight to support operational planning and strategic decision-making
• provide senior technical guidance and mentorship to analysts, engineers and apprentices, building identity security capability within the team
• act as a trusted advisor on identity and access matters across the business, balancing security requirements with operational practicality
• provide considered, proportionate guidance where security deviations are identified, ensuring remediation without unnecessary disruption
• promote a culture of shared accountability for identity security, strengthening collaboration between technical and business stakeholders.

Essential areas of expertise include:

• advanced working knowledge of enterprise security tooling, including PAM, IAG, SIEM, EDR, and NDR platforms, with the ability to design detection logic, tune telemetry and optimise signal-to-noise ratios in complex environments
• advanced working knowledge of enterprise IdPs such as AD and Entra
• proven ability to mentor, coach and uplift junior security professionals and apprentices, fostering technical growth, operational discipline and…