IAM Engineer

Chetwood Bank; Wrexham; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Birthday off

Pension with Royal London

Life Assurance

Private medical insurance

Dental and optical health insurance (A

Free breakfast

Job summary

Chetwood Bank is seeking an IAM Engineer to lead the design and optimisation of identity and access management across cloud, SaaS and on-prem environments.

You will be the technical IAM SME, translating identity strategy into secure, scalable controls to strengthen the bank's security posture and enable automated lifecycle management and governance across services.

Qualifications

• Strong expertise across the Microsoft Entra ecosystem.
• Hands-on experience delivering access management, PAM and identity governance solutions.
• Good understanding of modern identity technologies like SSO, federation and directory services.
• Knowledge of Zero Trust security principles and identity-led security controls.
• Scripting and automation with PowerShell desirable.
• Desirable IAM/PAM certifications such as SC-300, SC-100, AZ-500 or CISSP.

Responsibilities

• Design, implement and continuously improve IAM services in line with business, security and regulatory requirements.
• Engineer and support secure access management capabilities including Entra ID, SSO, federation, MFA, CA and directory services.
• Develop and maintain Identity governance capabilities, including lifecycle management, access reviews and RBAC.
• Monitor, maintain and optimise identity platforms, respond to incidents and drive improvements.
• Act as IAM SME, providing guidance and supporting the security engineering function.

Skills

Microsoft Entra

Entra ID

SSO

Federation

MFA

Conditional Access

Directory services

PowerShell

Microsoft Graph

Zero Trust

Education

Microsoft SC-300

SC-100

AZ-500

CISSP

Tools

Microsoft Graph

Job description

We’re a UK-based digital bank dedicated to getting the basics right and offering straightforward savings and mortgages.

As an IAM Engineer, you will lead the engineering and continuous improvement of Chetwoods Identity and access management capability across access management, privileged access management and identity governance. As the technical subject matter expert for the Microsoft Entra ecosystem, you will design, implement, and optimise identity services across the bank's cloud, SaaS, and on-premises environments. Translating identity strategy into secure, scalable controls that strengthen Chetwoods overall security posture.

Key Responsibilities

• Design, implement and continuously improve Chetwoods identity and access management services in line with business, security and regulatory requirements.
• Engineer and support secure access management capabilities, including Microsoft Entra ID, SSO, federation, MFA, Conditional Access and directory services.
• Develop and maintain Identity governance administration capabilities, including automated lifecycle management, access reviews and role-based access controls.
• Monitor, maintain and optimise identity platforms, responding to incidents and driving continuous service and security improvements.
• Act as the technical IAM subject matter expert, providing guidance, promoting best practice and supporting the wider security engineering function.

Skills, Knowledge & Expertise

• Strong expertise across the Microsoft Entra ecosystem, including Entra ID, conditional access, privileged identity management, identity protection and identity governance.
• Hands‑on experience delivering access management, privileged access management and identity governance and administration solutions.
• Good understanding of modern identity technologies, including SSO, federation and directory services.
• Knowledge of Zero Trust security principles and identity‑led security controls.
• Scripting and automation experience using PowerShell and Microsoft Graph is desirable.
• Relevant certifications such as Microsoft SC-300, SC-100, AZ-500, CISSP or equivalent IAM/PAM certifications are desirable.
• 25 days holiday PLUS your BIRTHDAY off
• Pension contribution with Royal London
• Life Assurance
• Private medical, dental and optical health insurance with Axa
• Free breakfast available

Data Protection

We anticipate that we will retain your data as part of the recruitment process for no longer than is necessary for the purpose for which it was collected unless we have sought your consent to keep your data for future suitable job vacancies.