IAM Automation Engineer: SailPoint & CyberArk (Hybrid)

Aveva Group Plc; Greater London; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

AVEVA is seeking an Identity & Access Management (IAM) Engineer to join our global IT team. You will engineer scalable, automated IAM services for workforce identities using SailPoint and CyberArk in a hybrid environment.

You will automate lifecycle processes, design JML workflows, and integrate IAM with ServiceNow, AD, and Entra ID while reducing manual tasks and supporting security governance across a distributed enterprise.

Qualifications

• Hands-on IAM engineering with SailPoint and CyberArk.
• Experience automating IAM lifecycle and JML.
• Strong scripting skills (PowerShell) and API usage.

Responsibilities

• Engineer and operate automated IAM solutions for workforce identities
• Support SailPoint with automation, scalability, and governance
• Design, implement, and optimise automated Joiner-Mover-Leaver (JML) processes
• Automate IAM access fulfilment via ServiceNow.
• Develop code-driven workflows and integrations to eliminate manual IAM tasks
• Support and maintain Active Directory and Entra ID environments
• Manage authentication, authorisation, roles, and entitlements
• Automate access certifications, reviews, and compliance reporting
• Respond to IAM-related incidents with root-cause fixes via automation
• Produce and maintain documentation, diagrams, and runbooks

Skills

IAM engineering

SailPoint

CyberArk

Automation scripting

PowerShell

APIs

SSO protocols

Hybrid environments

Education

Bachelor's degree in Computer Science, Engineering, Mathematics, or related field

IAM security certifications (e.g., SailPoint, Microsoft Identity)

Tools

ServiceNow

Jira

Job description

AVEVA is seeking an Identity & Access Management (IAM) Engineer to join our global IT team. You will engineer scalable, automated IAM services for workforce identities using SailPoint and CyberArk in a hybrid environment.

You will automate lifecycle processes, design JML workflows, and integrate IAM with ServiceNow, AD, and Entra ID while reducing manual tasks and supporting security governance across a distributed enterprise.