Hybrid IAM & AI Engineer: Identity Security & Analytics

Sainsbury's; Greater London; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Colleague discount

Pensions

Life cover

Performance bonus up to 10%

Annual leave

Season ticket loans

Cycle to work

Health cash plans

Employee assistance programme

Maternity/adoption leave up to 26 wks

Job summary

Sainsbury's is seeking an Identity and Access Management Engineer to join our modern software engineering environment. The role is based from the Coventry office with hybrid working, requiring attendance about once per week from home.

You'll apply IAM principles, manage Azure AD Entra ID, implement conditional access and MFA, and work with governance tools like Saviynt or SailPoint. You'll collaborate with IT, product and security teams to deliver secure, scalable IAM solutions.

Qualifications

• IAM concepts including authentication, authorization, and zero trust.
• Analyzing identity telemetry to support security improvements.
• Hands-on with Entra ID (Azure AD) including dynamic groups and service principals.
• Conditional Access, SSPR, MFA, and passwordless authentication experience.
• Identity governance: Access reviews and Entitlement Management.
• Hybrid identity concepts and AD basics including Azure AD Connect.
• Experience with governance tools such as Saviynt or SailPoint.

Responsibilities

• Collaborate with IT, product and security teams to deliver IAM roadmaps.
• Define AI or analytics use cases for identity governance and lifecycle management.
• Support identity lifecycle management and access risk reduction across platforms.

Skills

IAM principles

RBAC ABAC PBAC

Joiners Movers Leavers

Zero Trust

AI in IAM

Identity telemetry analysis

Dynamic groups

Conditional Access

MFA Passwordless

Identity governance

Access reviews

Entitlement Management

Saviynt

SailPoint

Azure AD Connect

Hybrid identity

AD basics LDAP

Azure Entra ID

Azure Monitor

Azure Log Analytics

Sentinel

Education

Microsoft Identity certifications

Security certifications

CISSP/CISM

Tools

Microsoft Entra ID (Azure AD)

Azure AD Connect

Saviynt

SailPoint

Azure Monitor

Log Analytics

Sentinel

Active Directory

LDAP

Job description

Sainsbury's is seeking an Identity and Access Management Engineer to join our modern software engineering environment. The role is based from the Coventry office with hybrid working, requiring attendance about once per week from home.

You'll apply IAM principles, manage Azure AD Entra ID, implement conditional access and MFA, and work with governance tools like Saviynt or SailPoint. You'll collaborate with IT, product and security teams to deliver secure, scalable IAM solutions.