IAM Lead Engineer

Bupa; Salford; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Private medical insurance

Enhanced pension scheme

Annual bonus scheme

25 days holiday + bank holidays

Flexible working options

Job summary

A leading health insurer in the UK is seeking an IAM Lead Engineer to lead the design, development, and operation of identity and access management technologies. You will build custom workflows, integrate IAM solutions, and support auditing processes. With over 7 years in cybersecurity and 5 years in IAM engineering, the ideal candidate will possess strong communication skills and relevant certifications. The role offers competitive salary, flexible working, and excellent benefits to promote wellbeing.

Qualifications

• Experience designing and operating IGA/PAM/EIM technologies.
• Strong understanding of identity technologies (SAML, OAuth, etc.).
• Hands-on experience with scripting (PowerShell, Python).
• Strong knowledge of SAML, OAuth, OpenID Connect
• Familiarity with AD, Entra ID, MFA, SSO and identity lifecycle

Responsibilities

• Lead the design and operation of IAM technologies.
• Build custom workflows and automate access provisioning.
• Monitor platforms and manage IAM-related incidents.
• Troubleshoot IAM, access and authentication issues
• Promote least-privilege and zero-trust governance
• Lead audits and IAM reporting
• Monitor platforms and manage remediation
• Drive automation using PowerShell and Python
• Collaborate with IT, Security, HR and business teams
• Develop IAM engineering team and foster security-first culture

Skills

IAM technologies design and operation

Identity technologies understanding

Scripting and automation

Strong communication skills

Python

Active Directory

Entra ID

MFA & SSO

Zero trust

Communication

Leadership

Audits & governance

Education

Professional certifications (CISSP, CISM, CISA)

Tools

CyberArk

SailPoint

BeyondTrust

Saviynt

Job description

* Before submitting your application, you should read our to understand how Bupa will use, store and share your information.* For Australia or New Zealand candidates - Before submitting your application, you should read our to understand how Bupa will use, store and share your information.IAM Lead Engineer page is loaded## IAM Lead Engineerlocations: Stainestime type: Full timeposted on: Posted Todayjob requisition id: R1215795Job Description:# **Identity and Access Management Lead Engineer**Competitive Salary + BenefitsLocation: London / Staines / Salford Quays / FlexiblePermanent – Fulltime# **We make health happen**At Bupa, we're here to help people live longer, healthier, happier lives. With no shareholders, we reinvest our profits into improving the health of our customers and the quality of the services we provide. As our IAM Lead Engineer, you will play a vital role in strengthening our security posture by leading the design, development and operation of identity and access management technologies across Bupa Global, India and UK (BGIUK).# **Key Responsibilities**• Lead the design, configuration, integration and support of Identity Governance & Administration (IGA), Privileged Access Management (PAM) and Electronic Identity Management (EIM) tools.• Build custom workflows, connectors and automation to support efficient access provisioning.• Integrate IAM solutions with core applications, Active Directory, Entra ID and cloud platforms.• Troubleshoot IAM, access, authentication and identity-related issues.• Implement least-privilege access, zero-trust principles and compliant access governance.• Support audits and produce IAM evidence and reporting.• Monitor platforms, respond to IAM-related incidents and manage remediation.• Identify opportunities for automation and orchestration using PowerShell, Python and APIs.• Collaborate with IT, Security, HR and business teams to deliver solutions that balance strong controls with smooth user experience.• Lead and develop a high-performing IAM engineering team.• Promote a culture of innovation, continuous improvement and security-first thinking.# **What We’re Looking For**• Experience designing and operating IGA/PAM/EIM technologies (CyberArk, SailPoint, BeyondTrust, Saviynt etc.).• Strong understanding of identity technologies (SAML, OAuth, OpenID Connect, LDAP, Kerberos).• Experience integrating IAM with cloud services (AWS, GCP) and on‐prem systems.• Hands‐on experience with scripting (PowerShell, Python) and automation.• Knowledge of Active Directory, Entra ID, MFA, SSO, federation and identity lifecycle.• Understanding of AI use cases in IAM.• 7+ years in cybersecurity or identity roles, 5+ years in IAM engineering leadership.• Experience in regulated environments and large-scale enterprises.• Professional certifications such as CISSP, CISM, CISA or IAM-specific qualifications.• Strong communication skills and ability to explain technical concepts clearly.# **Benefits**Our benefits are designed to make health happen for our people. Viva, our global wellbeing programme, supports mental, physical, financial, social and environmental wellbeing. We offer flexible working and a range of family‐friendly benefits.Upon joining Bupa you will receive the following benefits and more:* Private medical insurance* Enhanced pension scheme* Annual bonus scheme* 25 days holiday + bank holidays* Hybrid working options# **Why Bupa**We’re a health insurer and provider with no shareholders – our customers are our focus. Our people are driven by one purpose: helping people live longer, healthier, happier lives and making a better world. We encourage everyone to “Be You at Bupa” and champion diversity across our organisation. As a Level 2 Disability Confident Employer, we welcome disabled applicants who meet the minimum criteria and offer reasonable adjustments throughout the process.Time Type:Full timeJob Area:Locations:Staines - Willow Houselocations: Stainestime type: Full timeposted on: Posted Today