Identity & Access; IAM Engineer

Salary: £44,142, including a concessionary payment of £2,758 and £6,250 London weighting. You may also qualify for a skills payment ranging from £4,513 to £9,812 and a recruitment bonus of £2,000, both dependent on technical ability and successful assessment during the interview process.

Flexible working: This role is based on full-time hours (36 hours per week) with flexibility around start and finish times within core working hours. While our preference is for full-time working, in exceptional circumstances we may consider part-time arrangements, subject to business needs. We also offer hybrid working, typically involving one day per week working from home and the remainder in the office.

GCHQ are an intelligence, cyber and security agency with a mission to keep the UK safe. We use cutting‑edge technology, ingenuity and partnerships to identify, analyse and disrupt threats. Working with our intelligence partners, MI5 and MI6, we protect the UK from terrorism, cyber‑attacks, and espionage.

As an Identity and Access Management (IAM) Engineer, you’ll play a vital role in keeping the UK safe by ensuring secure access to sensitive systems. Your work will help guarantee that the right people have the right access at the right time.

Day‑to‑day work includes managing user accounts, resolving access and certificate issues, and monitoring platform health to maintain compliance and reliability. You’ll also support incident resolution and service requests, contribute to product development and roadmap planning, and deliver training on secure access practices. Occasional travel to Cheltenham and Manchester is required, with limited opportunities for international travel.

We’re looking for individuals with an infrastructure background and a passion for identity and access management. Practical experience with Windows or Linux infrastructure is essential, alongside core skills in Active Directory. Familiarity with Oracle Identity and Access Management (IAM) is desirable. You should have a solid foundation of applied IT experience and be able to communicate effectively with both technical and non‑technical stakeholders.

From day one, you’ll receive a structured induction and a tailored development plan. You’ll develop skills in:

• Technical Delivery: managing end‑to‑end delivery of cloud platforms and ERP systems, driving digital transformation and operational efficiency
• Product Development: contributing to the roadmap and lifecycle of IAM services
• Collaboration: engaging with internal teams and external partners across the UK Intelligence Community
• Certification: pursuing qualifications from Microsoft, Linux, Cyber Ark, and others

You’ll enjoy 25 days annual leave (rising to 30 days after 5 years’ service), 8 bank holidays, and 2.5 additional leave days. We also offer a competitive pension with employer contributions of at least 28.97%, an interest‑free season ticket loan, and other benefits.

We welcome applications from all individuals, particularly those who are under‑represented in our workforce, including:

• women
• people from ethnic minority backgrounds
• individuals with disabilities or neurodivergent conditions
• those from low socio‑economic backgrounds

Our selection process is fair, transparent, and based on merit. Each stage must be passed to progress further. The process consists of an Online Situational Judgement Test, an initial online application form, and a combined interview stage that includes a technical interview, skills assessment, and competency‑based interview.

We offer reasonable reimbursement of travel costs for candidates attending in‑person appointments during the recruitment and vetting process. Candidates must book their own travel, using the most economical option, and provide original hard copy receipts for reimbursement.