Associate Director, Identity Governance and Administration

Fitch; Manchester; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid work environment

Learning & mobility programs

Retirement plan

Healthcare benefits

Parental leave

Volunteer days

Job summary

Fitch Group in Manchester seeks a Senior IGA Engineer to design and evolve our SailPoint Identity Security Cloud program, integrating with HR systems, cloud providers, and directories. You will implement lifecycle workflows, API connections, and governance controls while contributing to platform development with Python and modern tooling.

The role covers onboarding, entitlement management, RBAC, attestation cycles, and operational tooling.

Qualifications

• 5+ years hands-on IGA/IAM engineering experience with platform implementations.
• Experience with SailPoint Identity Security Cloud including connectors and workflows.
• Experience with Delinea Secret Server platform for privileged access management.
• Proficient in Python scripting within Git-based workflows.
• Strong understanding of RBAC, JML lifecycle, and access certification.
• Experience with API-based integrations to HR systems, cloud providers, and directories.
• Familiarity with cloud identities (Azure AD/Entra ID) and Linux/Windows environments.
• Experience supporting audit engagements and evidence collection.

Responsibilities

• Design, develop, and maintain SailPoint integrations with internal/external systems.
• Build privileged-access integrations with Delinea and manage secret lifecycles.
• Develop provisioning logic, data transformations, and reporting pipelines.
• Implement JML and access workflows aligned to policy and controls.
• Oversee lifecycle of IGA artefacts in Git and containerise where appropriate.
• Administer IGA program including onboarding, entitlements, RBAC, and attestation cycles.
• Maintain IGA portal and tooling; enhance web components where needed (Vue.js).
• Monitor platform health and coordinate issue resolution with vendors/teams.

Skills

SailPoint Identity Security Cloud

Python scripting

Docker

REST/SOAP API integrations

RBAC and least privilege

JML workflows

Git version control

Azure AD/Entra ID

Audit & controls

Tools

Delinea Platform

Vue.js (frontend)

SailPoint connectors

Kubernetes

Job description

Select how often (in days) to receive an alert:

Associate Director, Identity Governance and Administration

Requisition ID: 50637

Business Unit: Fitch Group

Category: Information Technology

Location: Manchester, GB

Date Posted: Sep 15, 2026

Position Title: Associate Director, Identity Governance and Administration in our Manchester office.

Fitch Group is currently seeking a Senior Identity and Governance Administration (IGA) Engineer based out of our Manchester office.

As a leading, global financial information services provider, Fitch Group delivers vital credit and risk insights, robust data, and dynamic tools to champion more efficient, transparent financial markets. With over 100 years of experience and colleagues in over 30 countries, Fitch Group’s culture of credibility, independence, and transparency is embedded throughout its structure, which includes Fitch Ratings, one of the world’s top three credit ratings agencies, and Fitch Solutions, a leading provider of insights, data and analytics. With dual headquarters in London and New York, Fitch Group is owned by Hearst.

Fitch is seeking a Senior IGA Engineer to drive the design, implementation, and ongoing evolution of our Identity and Governance Administration programme. This is a hands‑on technical role that bridges engineering and governance: the successful candidate will build and maintain integrations between our IGA platform (SailPoint Identity Security Cloud) and the wider technology estate, design and implement lifecycle and access request workflows, and contribute to platform development using Python and modern tooling. Beyond the code, this person will be a credible technical voice in governance forums, audit engagements, and stakeholder conversations, able to articulate identity concepts clearly and translate business requirements into working solutions.

How You’ll Make an Impact:

• Design, develop, and maintain integrations between SailPoint Identity Security Cloud and internal and external systems (HR platforms, cloud providers, SaaS applications, on‑premises directories), using connectors, REST APIs, and custom rules/scripts.
• Build and maintain privileged‑access integrations with Delinea Secret Server / Delinea Platform, including vault configuration, secret lifecycle, and external‑secrets distribution.
• Author Python scripts and automation to extend IGA platform capabilities: provisioning logic, aggregation customisation, transformation rules, reporting pipelines, and operational tooling.
• Design and implement joiner–mover–leaver (JML) workflows, access request workflows, and access certification campaigns within SailPoint, aligning them to business policy and control requirements.
• Manage the full development lifecycle of IGA artefacts — version‑controlled in Git, containerised where appropriate using Docker, and deployed through structured change processes.
• Operate and administer the IGA programme: account onboarding, entitlement management, role engineering (RBAC), separation of duties, least‑privilege enforcement, and attestation cycles.
• Maintain and develop the IGA operations portal and team‑facing tooling; Vue.js front‑end experience is a practical advantage when extending or customising web‑based components.
• Monitor platform health, integration performance, and connector status; raise and track issues with vendors or internal teams through timely resolution.
• Evidence of IGA governance controls for audit engagements (e.g., SOX, Dodd Frank, SOC 2, internal audit), preparing walkthroughs, evidence packs, and remediation tracking.
• Maintain technical documentation, runbooks, SOPs, and architecture diagrams; keep them current as integrations and workflows evolve.
• Manage non‑human identities: service accounts, API credentials, certificates, and secrets — including lifecycle governance, vaulting, and distributed secrets via external‑secrets patterns (e.g., AWS Secrets Manager, Azure Key Vault).
• Apply AI‑assisted tooling and analytics to improve anomaly detection, provisioning accuracy, and audit evidence of quality, while maintaining governance and data‑protection standards.
• Collaborate with engineering, operations, compliance, and security teams to onboard applications and services into the IGA platform, providing clear technical guidance throughout.

You May be a Good Fit if:

• 5+ years of hands‑on experience in an IGA or IAM engineering role, with demonstrable platform implementation and integration work — not solely operational support.
• Direct experience with SailPoint Identity Security Cloud (IdentityNow) including connector configuration, rule development, workflow design, and access certification — or equivalent depth on a comparable IGA platform.
• Experience with Delinea Secret Server / Delinea Platform for privileged access management, including vault setup, secret lifecycle, and integration with broader IGA workflows.
• Proficient in Python for scripting and automation in an enterprise context; comfortable writing maintainable, reviewable code and working within a Git‑based development workflow.
• Practical experience with Docker for containerising tooling and services; understanding of how containers fit into a modern integration and deployment pipeline.
• Strong integration experience: designing and implementing API‑based (REST/SOAP) connections between IGA platforms and external systems such as HR systems, cloud identity providers, ITSM platforms, and directory services.
• Solid understanding of IGA and governance concepts: JML lifecycle, RBAC, least privilege, separation of duties, access certification, privileged session management, and break‑glass procedures.
• Familiarity with directory services and cloud identity platforms (e.g., Entra ID / Azure AD, Active Directory, Amazon AWS) and common enterprise environments (Linux, Windows Server).
• Experience supporting audit or regulatory engagements (SOX, Dodd Frank, SOC2), including evidence preparation, control walkthroughs, and remediation tracking.
• Strong written and verbal communication skills; able to present technical concepts clearly to both engineering peers and non‑technical stakeholders and auditors.
• Experience with collaboration and documentation tools such as Microsoft 365 (SharePoint Online, Teams) and the Atlassian suite (Confluence, Jira).

What Would Make You Stand Out:

• Exposure to secrets‑management patterns using external secrets operators or cloud‑native vaults (AWS Secrets Manager, Azure Key Vault, Oracle Wallet).
• Relevant certifications in identity or security domains (e.g., SailPoint Certified IdentityNow Engineer, CISSP, CISM, CISA, Security+) are beneficial but not mandatory.
• Familiarity with infrastructure‑as‑code or CI/CD tooling in the context of deploying identity integrations and automation.
• Experience contributing to identity programme strategy, not just execution: connector roadmaps, lifecycle policy design, or IGA platform selection.
• Experience using AI tools to improve engineering productivity, accelerate analysis, reduce repetitive work, and strengthen the quality and consistency of technical deliverables.
• Hands‑on experience with AI coding assistants for code generation, refactoring, debugging, test creation, documentation, and code review, with appropriate human oversight and security controls.

Why Choose Fitch:

• Hybrid Work Environment: 3 days a week in office required based on your line of business and location
• A Culture of Learning & Mobility: Dedicated trainings, leadership development and mentorship programs designed to ensure that your time at Fitch will be a continuous learning opportunity
• Investing in Your Future: Retirement planning and tuition reimbursement programs that empower you to achieve your short and long‑term goals
• Promoting Health & Wellbeing: Comprehensive healthcare offerings that enable physical, mental, financial, social, and occupational wellbeing
• Supportive Parenting Policies: Family‑friendly policies, including a generous global parental leave plan, designed to help you balance career and family life effectively
• Inclusive Work Environment: A collaborative workplacewhere all voices are valued, withEmployee Resource Groups that unite and empower our colleagues around the globe
• Dedication to Giving Back: Paid volunteer days, matched funding for donations and ample opportunities to volunteer in your community

At Fitch, AI is embedded in how we work every day—supporting smarter decision‑making, streamlining workflows, and enabling new ways to create value for our business and clients. Intelligent solutions are increasingly part of our day‑to‑day operations, helping teams work more efficiently and think differently as we continue to evolve. We’re looking for colleagues who are comfortable operating in an AI‑enabled environment—or who are curious, adaptable, and eager to build their AI literacy over time. We value professionals who embrace technology as part of continuous learning and who are committed to using it thoughtfully to enhance how work gets done.

Fitch is committed to providing global securities markets with objective, timely, independent and forward‑looking credit opinions. To protect Fitch’s credibility and reputation, our employees must take every precaution to avoid conflicts of interest or any appearance of a conflict of interest.Should you be successful in the recruitment process at Fitch Ratings you will be asked to declare any securities holdings and other potential conflicts prior to commencing employment. If you, or your immediate family, have any holdings that may conflict with your work responsibilities, you may be asked to divest yourself of them before beginning work.

Fitch is proud to be an Equal Opportunity and Affirmative Action Employer. We evaluatequalified applicants without regard to race, color, national origin, religion, sex, sexual orientation, gender identity, disability, protected veteran status, and other statuses protected by law.

Disclaimer on Benefits Information

In accordance with the requirements of the EU Pay Transparency Directive, the benefits described in this job advertisement represent a general overview and do not constitute the full list of benefits available for this position. Comprehensive and final details regarding compensation and benefits will be provided to candidates at the offer stage.