Senior IAM Engineer

Role Overview

As a Senior IAM Engineer, you will lead the design and delivery of a next-generation Identity and Access Management (IAM) capability. This key role supports a major transformation program, replacing legacy identity solutions and establishing a modern, scalable CIAM and workforce identity platform. You will take ownership of end-to-end IAM solution design and implementation, ensuring identity is secure, seamless, and enables strong customer and workforce experiences across the digital ecosystem.

Responsibilities

• Lead and own the end-to-end design and implementation of enterprise IAM solutions across transformation programs, covering both CIAM (external users) and workforce identity.
• Drive evaluation and selection of IAM platforms (e.g., evolution of Azure B2C / Microsoft Entra External ID or alternatives), including defining target-state architecture, transition roadmaps, and vendor engagement.
• Translate enterprise and solution architecture into practical, secure, and scalable IAM designs incorporating automation, Infrastructure as Code (IaC), and CI/CD practices.
• Provide hands-on engineering leadership across the IAM lifecycle, including design, build, integration, complex troubleshooting, and decision-making.
• Design and implement integrations across the application ecosystem (e.g., Dynamics 365, ServiceNow, APIs, portals), focusing on OIDC / OAuth2 authentication flows, token design, and service-to-service authentication patterns.
• Implement identity lifecycle management, RBAC models, and least privilege access.
• Design and strengthen identity security controls, including MFA, conditional access, and modern authentication.
• Identify and mitigate identity-related security risks, such as fraud and account takeover threats.

Requirements

• Proven experience delivering enterprise IAM or CIAM solutions in complex, regulated environments.
• Strong hands-on experience with modern identity platforms such as Microsoft Entra ID (Azure AD), Azure AD B2C / Entra External ID, or Okta / Auth0.
• Experience leading or contributing to IAM platform selection and migration from legacy identity solutions such as Active Directory.
• Strong expertise in modern authentication and identity protocols: OAuth2, OpenID Connect (OIDC), and SAML.
• Experience designing and implementing API and service authentication patterns.
• Solid understanding of Identity lifecycle management (joiner/mover/leaver), access governance, and CIAM patterns for external users.
• Ability to translate enterprise architecture into implementable IAM solutions.
• Experience integrating IAM with enterprise platforms such as CRM and Case Management (e.g., D365, ServiceNow), Service Management (Fresh Works), and digital channels.
• Strong understanding of cloud-first identity architecture patterns within Azure environments.
• Demonstrated technical leadership and stakeholder engagement skills across architecture, security, and delivery functions.

Preferred Qualifications

• Experience working in environments using split identity models (internal vs. external identity platforms).
• Experience migrating from Azure AD B2C or similar legacy CIAM implementations.
• Experience working in highly regulated industries.

Benefits

• Hybrid Working: Flexible arrangements with two days a week in modern offices designed for collaboration and wellbeing.
• Inclusive Leave Options: Flexible public holidays, gender affirmation leave, women’s health leave, and bonus paid time off over the end-of-year holiday period.
• Accredited Workplace: Recognized for LGBTQ+ workplace inclusion (Silver AWEI Accreditation 2025) and certified as a Family Friendly Workplace.
• Professional Growth: Opportunities to deepen expertise within a progressive financial ombudsman service.