IAM Lead Engineer

Bupa UK; Staines-upon-Thames; Hybrid; GBP 70,000 - 90,000; Full time

Benefits offered by this job

Private medical insurance

Enhanced pension scheme

Annual bonus scheme

25 days holiday + bank holidays

Hybrid working options

Job summary

Bupa UK is seeking an Identity and Access Management Lead Engineer to oversee the design, configuration, and support of IAM tools. The role requires strong experience in cybersecurity and IAM engineering, as well as leadership skills to guide a high-performing engineering team.

Competitive salary offered along with a range of benefits including private medical insurance, an enhanced pension scheme, and flexible working options.

Qualifications

• 7+ years in cybersecurity or identity roles, 5+ years in IAM engineering leadership.
• Experience designing and operating IGA/PAM/EIM technologies.
• Experience in regulated environments and large-scale enterprises.

Responsibilities

• Lead the design, configuration, integration and support of IAM tools.
• Implement least-privilege access and compliant access governance.
• Monitor platforms and manage IAM-related incidents.

Skills

Identity Governance & Administration technologies (e.g., CyberArk, SailPoint)

Scripting (PowerShell, Python)

Identity technologies (SAML, OAuth, OpenID Connect)

IAM integration with cloud services (AWS, GCP)

Active Directory, Entra ID

Communication skills

Education

Professional certifications (CISSP, CISM, CISA)

Job description

Identity and Access Management Lead Engineer

Competitive Salary + Benefits

Location: London / Staines / Salford Quays / Flexible

Permanent – Fulltime

Key Responsibilities

• Lead the design, configuration, integration and support of Identity Governance & Administration (IGA), Privileged Access Management (PAM) and Electronic Identity Management (EIM) tools.
• Build custom workflows, connectors and automation to support efficient access provisioning.
• Integrate IAM solutions with core applications, Active Directory, Entra ID and cloud platforms.
• Troubleshoot IAM, access, authentication and identity‑related issues.
• Implement least‑privilege access, zero‑trust principles and compliant access governance.
• Support audits and produce IAM evidence and reporting.
• Monitor platforms, respond to IAM‑related incidents and manage remediation.
• Identify opportunities for automation and orchestration using PowerShell, Python and APIs.
• Collaborate with IT, Security, HR and business teams to deliver solutions that balance strong controls with a smooth user experience.
• Lead and develop a high‑performing IAM engineering team.
• Promote a culture of innovation, continuous improvement and security‑first thinking.

What We’re Looking For

• Experience designing and operating IGA/PAM/EIM technologies (e.g., CyberArk, SailPoint, BeyondTrust, Saviynt).
• Strong understanding of identity technologies (SAML, OAuth, OpenID Connect, LDAP, Kerberos).
• Experience integrating IAM with cloud services (AWS, GCP) and on‑prem systems.
• Hands‑on experience with scripting (PowerShell, Python) and automation.
• Knowledge of Active Directory, Entra ID, MFA, SSO, federation and identity lifecycle.
• Understanding of AI use cases in IAM.
• 7+ years in cybersecurity or identity roles, 5+ years in IAM engineering leadership.
• Experience in regulated environments and large‑scale enterprises.
• Professional certifications such as CISSP, CISM, CISA or IAM‑specific qualifications.
• Strong communication skills and the ability to explain technical concepts clearly.

Benefits

Our benefits are designed to make health happen for our people. Viva, our global wellbeing programme, supports mental, physical, financial, social and environmental wellbeing. We offer flexible working and a range of family‑friendly benefits.

• Private medical insurance
• Enhanced pension scheme
• Annual bonus scheme
• 25 days holiday + bank holidays
• Hybrid working options