Identity and Access Management Engineer

OVERVIEW

The Maples Group is a standard bearer in financial and legal services, trusted by many of the world's largest hedge fund managers, private equity firms and international corporations.

Our distinction flows from our carefully curated team: 2,500+ professionals characterised by tenacity, ethics and exacting excellence. Operating in key financial centres across the Americas, Asia, Europe and the Middle East, our international presence offers a unique springboard for career development and cross-cultural immersion. Our side-by-side financial and legal services are similarly ripe for interdisciplinary learning and growth.

The Maples Group looks to add a Leeds based Identity and Access Management Engineer to our team and invites eager and qualified candidates to apply. We are committed to diversity, inclusion and equality of opportunity as we attract, retain and develop world-class talent.

Our merit-based culture suits professionals in pursuit of boundless careers and lives. Beyond their acumen, team members are collaborative and conscientious, bringing a healthy sense of drive and purpose to each interaction and to all aspects of their work.

The Identity and Access Management Engineer is responsible for implementing, maintaining and supporting the tools, processes and controls that underpin the firm's Identity and Access Management programme. The successful candidate will help strengthen identity security across Identity Governance, Privileged Access Management, Authentication, Federation, Access Reviews and Identity Threat Detection initiatives.

Key responsibilities include:

• Support and administer enterprise IAM platforms and services across
  • Identity Governance and Administration (IGA)
  • Privileged Access Management (PAM)
  • Single Sign-on (SSO)
  • Federation
  • Multi-Factor Authentication (MFA)
  • Passwordless Authentication
  • Identity Lifecycle Management
• Support Joiner, Mover and Leaver (JML) processes, role management and access provisioning activities
• Support access control evidence gathering, access review reporting, privileged access validation and remediation tracking for internal and external audits
• Implement and support modern identity security capabilities including:
  Microsoft Entra , Conditional Access, Privileged Identity Management (PIM), Windows Hello for Business, FIDO2 Authentication and Identity Threat Detection and Response (ITDR)
• Participate in Zero Trust security initiatives and identity-centric security programs
• Support application onboarding and integration activities for: SAML, OAuth, OpenID Connect (OIDC), SCIM Provisioning and Federation Services
• Support internal and external audit activities, including evidence collection and control validation
• Maintain IAM operational procedures, standards, technical documentation and support guides
• Assist with remediation of audit findings and compliance requirements
• Maintain awareness of evolving identity security threats, industry best practices and regulatory requirements
• Participate in identity transformation initiatives and projects aimed at improving security, operational efficiency and user experience
• Contribute to the evolution of the firm's identity-first and Zero Trust security strategy
• Support modernization efforts involving cloud identity, identity governance and privileged access management technologies
• Understand the organisation's mission, values, operations, goals, risks and risk tolerance
• Assist in the implementation and operation of the security programmes and projects as required
• Maintain technical security knowledge by attending training courses, educational workshops where required

What You Bring

In addition to indisputably high ethical standards and autonomy, the ideal candidate possesses the following:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity or a related discipline
• 5+ years of experience supporting, implementing or administering enterprise IAM solutions, with practical experience in one or more IAM domains such such as IGA, PAM, SSO, federation, MFA, lifecycle management or access governance
• Understanding of authentication and authorization standards, including, SAML, OAuth,…