Identity & Access Management Engineer

• Design, build and support IAM integrations with enterprise applications, directories and authoritative data sources
• Configure and maintain identity lifecycle management processes, including Joiners, Movers and Leavers (JML)
• Deliver application onboarding and access provisioning solutions across IAM platforms
• Implement and support role-based access control (RBAC), access governance and certification processes
• Develop integrations using APIs, web services and directory technologies
• Investigate and resolve identity, provisioning and access-related issues
• Collaborate with security, infrastructure, application and business teams to deliver IAM services
• Support testing, deployment and operational transition activities
• Produce and maintain technical documentation, support procedures and knowledge transfer materials
• Contribute to continuous improvement, automation and optimisation of IAM processes and services

• Proven experience delivering IAM, IDAM, IGA or Access Governance solutions within complex enterprise environments
• Strong understanding of identity lifecycle management and access provisioning processes
• Experience integrating applications using REST APIs, web services and identity data sources
• Experience with enterprise directory services including Active Directory, LDAP and Microsoft Entra
• Knowledge of RBAC, access governance, certification and compliance controls
• Experience troubleshooting identity synchronisation, provisioning and authentication issues
• Strong stakeholder engagement and communication skills
• Experience working within Agile delivery environments
• Ability to create and maintain technical documentation and operational procedures
• Security Clearance required or willingness to go through it
• Must complete Baseline Personnel Security Standard onboarding checks
• Desirable: experience with Saviynt, SailPoint, Omada, Forge Rock or similar IAM/IGA platforms
• Desirable: experience integrating with Service Now
• Desirable: knowledge of SAML, OAuth2, OpenID Connect and SCIM
• Desirable: experience supporting PAM solutions
• Desirable: experience in government, regulated or high-security environments
• Desirable: understanding of Zero Trust and modern identity security principles
• Desirable: scripting or automation experience using Power Shell, Python or similar technologies

Demonstrates expertise in Identity and Access Management (IAM) solutions, including identity lifecycle management, access provisioning, and role-based access control (RBAC). Proficient in integrating applications using REST APIs and enterprise directory services while ensuring compliance and security standards are met.

• IAM Solutions Delivery
• Identity Lifecycle Management
• REST API Integration
• Active Directory
• Access Governance

• Identity Lifecycle Management
• Access Provisioning
• Role-Based Access Control (RBAC)
• REST API Integration
• Web Services
• Active Directory
• LDAP
• SAML
• OAuth2
• Python

• Stakeholder Engagement
• Communication Skills

• Security Clearance
• Baseline Personnel Security Standard

• Identity Governance and Administration (IGA)
• Access Governance
• Zero Trust
• High-Security Environments
• Agile Delivery

• Saviynt
• Sail Point
• Omada
• Forge Rock
• Service Now