Senior Identity & Access Management Engineer
Job Description
[Up to c. $275k Comp Package (or equivalent) | Office-Led Working]
Role Overview
We're representing a global multi-strategy investment management firm strengthening its identity security capabilities across a sophisticated technology environment. With an expanding focus on access governance, automation and emerging AI technologies, the business is looking for an experienced IAM Engineer to help develop and scale its security infrastructure.
Working within the Information Security function and reporting to the IAM Lead, this is a hands-on engineering role spanning identity governance, authentication, privileged access and the protection of sensitive business data. You'll take ownership of technical implementations, strengthen existing integrations and develop controls that support both human and non-human identities. A particularly interesting aspect of the mandate is the growing intersection between traditional identity management and AI security. The successful engineer will help establish appropriate safeguards for automated workloads and AI agents, whilst applying modern engineering and automation techniques to improve the wider IAM function...
Role Snapshot
- Bring approximately 6-10 years of practical IAM or identity security engineering experience, including substantial responsibility for enterprise-scale implementations
- Demonstrate advanced engineering expertise with SailPoint, Saviynt or a comparable identity governance platform, including access certification, provisioning, entitlement management and identity lifecycle controls
- Design and enhance authentication and authorisation capabilities across workforce, service and AI-agent identities, incorporating modern access policies and security controls
- Integrate identity platforms with enterprise applications, cloud environments and security tooling, with working knowledge of Okta, Microsoft Entra ID or similar authentication technologies
- Apply sound knowledge of privileged access and secrets management, including platforms such as CyberArk, Delinea or HashiCorp Vault
- Develop automated identity workflows and bespoke integrations using PowerShell and SQL, with the ability to troubleshoot complex access, synchronisation and provisioning issues
- Understand modern identity security principles, including MFA, FIDO2, passkeys, role-based and attribute-based access controls, and more granular authorisation models
- Support data access governance, control assessments and security reviews, with an appreciation of financial-sector obligations including SOX, GLBA, GDPR and applicable regulatory requirements
- Apply AI-assisted engineering tools such as Claude Code or Codex to IAM/security workflows, whilst contributing to secure identity and access models for emerging agentic systems
- (Preferred) Bring Python scripting, MCP development, SailPoint/Saviynt certifications or additional hands-on experience across Active Directory, Microsoft 365 and AWS IAM
...
Apply for this role
All fields marked with * are required.