IAM Engineer

Chetwood Bank; United Kingdom; On-site; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid working

Private medical insurance

Life Assurance

Pension

Job summary

Chetwood Bank is seeking an IAM Engineer to lead the design and improvement of identity and access management across cloud, on‑premises, and SaaS environments. You will be the technical SME for the Microsoft Entra ecosystem, delivering secure, scalable identity services.

You will implement governance, automate lifecycle processes, and work closely with Security Engineering to strengthen posture. The role offers hybrid working in the UK and a competitive package.

Qualifications

• Experience delivering IAM/PAM and governance solutions.
• Strong Microsoft Entra and cloud/on-prem identity deployments.
• Knowledge of SSO, federation and directory services.

Responsibilities

• Design and improve IAM services per security/regulatory needs.
• Engineer secure access mgmt including Entra ID, SSO, MFA, CA.
• Develop identity governance with lifecycle management and access reviews.
• Monitor and optimise identity platforms, respond to incidents.
• Act as IAM SME supporting wider security engineering.

Skills

Microsoft Entra

Access management

SSO & Federation

Directory services

Zero Trust

PowerShell

Microsoft Graph

IAM certifications (SC-300/SC-100/AZ-5

CISSP or IAM/PAM certs

Job description

IAM Engineer

Department: Technology- InfoSec

Employment Type: Full Time

Location: Wrexham

Reporting To: Security Engineering Manager

Description

As an IAM Engineer, you will lead the engineering and continuous improvement of Chetwood's Identity and access management capability across access management, privileged access management and identity governance. As the technical subject matter expert for the Microsoft Entra ecosystem, you will design, implement, and optimise identity services across the bank's cloud, SaaS, and on-premises environments. Translating identity strategy into secure, scalable controls that strengthen Chetwood's overall security posture.

Key Responsibilities

• Design, implement and continuously improve Chetwood's identity and access management services in line with business, security and regulatory requirements.
• Engineer and support secure access management capabilities, including Microsoft Entra ID, SSO, federation, MFA, Conditional Access and directory services.
• Develop and maintain Identity governance administration capabilities, including automated lifecycle management, access reviews and role-based access controls.
• Monitor, maintain and optimise identity platforms, responding to incidents and driving continuous service and security improvements.
• Act as the technical IAM subject matter expert, providing guidance, promoting best practice and supporting the wider security engineering function.

Skills, Knowledge & Expertise

• Strong expertise across the Microsoft Entra ecosystem, including Entra ID, conditional access, privileged identity management, identity protection and identity governance.
• Hands‑on experience delivering access management, privileged access management and identity governance and administration solutions.
• Good understanding of modern identity technologies, including SSO, federation and directory services.
• Knowledge of Zero Trust security principles and identity‑led security controls.
• Scripting and automation experience using PowerShell and Microsoft Graph is desirable.
• Relevant certifications such as Microsoft SC-300, SC-100, AZ‑500, CISSP or equivalent IAM/PAM certifications are desirable.

Job Benefits

• Competitive salary
• 25 days holiday PLUS your BIRTHDAY off
• Pension contribution with Royal London
• Life Assurance
• Private medical, dental and optical health insurance with Axa
• Hybrid working
• Free breakfast available