IAM Engineer - London

Chetwood Bank; Malham; Hybrid; GBP 54,000 - 66,000; Full time

Benefits offered by this job

25 days holiday

Birthday off

Pension contribution

Private medical insurance

Hybrid working

Free breakfast

Job summary

Chetwood Bank is seeking an IAM Engineer in London to lead the design, implementation and continual enhancement of the bank’s Identity and Access Management capabilities across cloud, SaaS and on-prem environments.

The role focuses on delivering secure, scalable controls within the Microsoft Entra ecosystem, driving Zero Trust principles and integration with governance and lifecycle management. Hybrid working is available.

Qualifications

• Expertise with Microsoft Entra ecosystem (Entra ID, conditional access, PIM, identity governance).
• Hands-on experience delivering access management and identity governance solutions.
• Knowledge of SSO, federation and directory services.

Responsibilities

• Design and improve IAM services to meet security and regulatory requirements.
• Engineer and support secure access controls including Microsoft Entra ID, SSO, MFA and CA.
• Develop lifecycle management, access reviews and RBAC within identity governance.

Skills

Microsoft Entra ID

SSO

MFA

Identity governance

PowerShell

Microsoft Graph

Zero Trust

Scripting & automation

Regulatory alignment

Tools

Azure/Azure AD

Job description

IAM Engineer - London Salary: 60,000 / year

As an IAM Engineer, you will lead the engineering and continuous improvement of Chetwood's Identity and access management capability across access management, privileged access management and identity governance. As the technical subject matter expert for the Microsoft Entra ecosystem, you will design, implement, and optimise identity services across the bank's cloud, SaaS, and on-premises environments. Translating identity strategy into secure, scalable controls that strengthen Chetwood's overall security posture.

Key Responsibilities

• Design, implement and continuously improve Chetwood's identity and access management services in line with business, security and regulatory requirements.
• Engineer and support secure access management capabilities, including Microsoft Entra ID, SSO, federation, MFA, Conditional Access and directory services.
• Develop and maintain Identity governance administration capabilities, including automated lifecycle management, access reviews and role-based access controls.
• Monitor, maintain and optimise identity platforms, responding to incidents and driving continuous service and security improvements.
• Act as the technical IAM subject matter expert, providing guidance, promoting best practice and supporting the wider security engineering function.

Skills, Knowledge and Expertise

• Strong expertise across the Microsoft Entra ecosystem, including Entra ID, conditional access, privileged identity management, identity protection and identity governance.
• Hands-on experience delivering access management, privileged access management and identity governance and administration solutions.
• Good understanding of modern identity technologies, including SSO, federation and directory services.
• Knowledge of Zero Trust security principles and identity-led security controls.
• Scripting and automation experience using PowerShell and Microsoft Graph is desirable.
• Relevant certifications such as Microsoft SC-300, SC-100 AZ-500, CISSP or equivalent IAM/PAM certifications are desirable.

Benefits

• Competitive salary
• 25 days holiday PLUS your BIRTHDAY off
• Pension contribution with Royal London Life Assurance
• Private medical, dental and optical health insurance with Axa
• Hybrid working
• Free breakfast available

About Chetwood Bank

Were a UK-based digital bank dedicated to getting the basics right and offering straightforward savings and mortgages

Data Protection We anticipate that we will retain your data as part of the recruitment process for no longer than is necessary for the purpose for which it was collected unless we have sought your consent to keep your data for future suitable job vacancies.

Cifas The personal information we have collected from you will be shared with Cifas who will use it to prevent fraud, other unlawful or dishonest conduct, malpractice, and other seriously improper conduct. If any of these are detected you could be refused certain services or employment. Your personal information will also be used to verify your identity. Further details of how your information will be used by us and Cifas, and your data protection rights, can be found by