IAM Engineer: Identity Security & Access Governance-Hybrid

The Maples Group (Financial Services); Leeds; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid working

Comprehensive health coverage (medical

Competitive vacation packages

Educational assistance and development

Savings or pension plan

Life insurance

Travel insurance

Global mental wellness programme

Sports clubs and social events

Job summary

The Maples Group in Leeds is seeking an Identity and Access Management Engineer to implement, maintain and support IAM tools and controls across the firm's security program. You will strengthen identity security across governance, PAM, authentication, federation, MFA and related initiatives.

This role requires 5+ years in IAM, knowledge of SAML, OAuth, OpenID Connect (OIDC), and experience with platforms like Entra ID, CyberArk or Okta.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity or a related discipline.
• 5+ years of experience supporting, implementing or administering enterprise IAM solutions, with practical experience in IGA, PAM, SSO, federation, MFA, lifecycle management or access governance
• Understanding of authentication and authorization standards, including, SAML, OAuth, OpenID Connect (OIDC), LDAP and Kerberos
• Experience with IAM platforms such as Active Directory, Microsoft Entra ID, CyberArk, SailPoint, ClearSkye, Okta, Ping Identity or equivalent technologies would be advantageous
• Experience in integrating applications with identity providers and access management solutions
• Experience executing access reviews, RBAC initiatives and governance activities
• CISSP (Associate) and/or Microsoft Certified: Identity and Access Administrator Associate (SC-300) or equivalent cybersecurity / identity-security focused certification are preferred
• Familiarity with Windows servers, GPO, Networking
• Scripting or automation using PowerShell, Python, REST APIs or Microsoft Graph API
• Strong troubleshooting and problem-solving skills with the ability to perform root cause analysis
• Excellent communication and documentation skills
• Ability to think critically, challenge existing approaches, and propose practical improvements
• Self-motivated team player who takes ownership and can work effectively across technical and non-technical teams

Responsibilities

• Support and administer enterprise IAM platforms across IGA, PAM, SSO, federation, MFA and lifecycle management
• Support Joiner, Mover and Leaver (JML) processes, role management and access provisioning activities
• Support access control evidence gathering, access review reporting, privileged access validation and remediation tracking for internal and external audits
• Implement and support modern identity security capabilities including: Microsoft Entra ID, Conditional Access, Privileged Identity Management (PIM), Windows Hello for Business, FIDO2 Authentication and Identity Threat Detection and Response (ITDR)
• Participate in Zero Trust security initiatives and identity-centric security programs
• Support application onboarding and integration activities for: SAML, OAuth, OpenID Connect (OIDC), SCIM Provisioning and Federation Services
• Support internal and external audit activities, including evidence collection and control validation
• Maintain IAM operational procedures, standards, technical documentation and support guides
• Assist with remediation of audit findings and compliance requirements
• Maintain awareness of evolving identity security threats, industry best practices and regulatory requirements
• Participate in identity transformation initiatives and projects aimed at improving security, operational efficiency and user experience
• Contribute to the evolution of the firm's identity-first and Zero Trust security strategy
• Support modernization efforts involving cloud identity, identity governance and privileged access management technologies
• Understand the organisation's mission, values, operations, goals, risks and risk tolerance
• Assist in the implementation and operation of the security programmes and projects as required
• Maintain technical security knowledge by attending training courses, educational workshops where required

Skills

IAM

Identity Governance

Privileged Access Management

Single Sign-On

MFA / Passwordless

RBAC / Access Governance

PowerShell / Python

Documentation

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity or related

Tools

Microsoft Entra ID

CyberArk

SailPoint

Okta

Ping Identity

ClearSkye

Job description

The Maples Group in Leeds is seeking an Identity and Access Management Engineer to implement, maintain and support IAM tools and controls across the firm's security program. You will strengthen identity security across governance, PAM, authentication, federation, MFA and related initiatives.

This role requires 5+ years in IAM, knowledge of SAML, OAuth, OpenID Connect (OIDC), and experience with platforms like Entra ID, CyberArk or Okta.