IAM Lead Engineer — Zero-Trust & PAM Automation (Hybrid)

Bupa; Staines-upon-Thames; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Private medical insurance

Enhanced pension scheme

25 days holiday + bank holidays

Hybrid working options

Job summary

Bupa is seeking an experienced Lead Cyber Security Engineer to drive IAM design, development and operation across our global estate. You will lead IGA, PAM and EIM initiatives, build automation, and ensure least-privilege access and zero-trust principles across cloud and on-prem systems.

In this role you will mentor a high-performing IAM engineering team, collaborate with IT, Security and HR, and support audits with IAM evidence and reporting.

Qualifications

• 7+ years in cybersecurity or identity roles
• 5+ years in IAM engineering leadership
• Experience designing and operating IGA/PAM/EIM technologies
• Strong understanding of identity technologies (SAML, OAuth, OpenID Connect, LDAP)

Responsibilities

• Lead design, configuration, integration and support of IGA, PAM and EIM tools
• Build workflows, connectors and automation for access provisioning
• Integrate IAM with AD, Entra ID and cloud platforms
• Troubleshoot IAM and identity-related issues
• Promote least-privilege and zero-trust governance
• Lead and develop a high-performing IAM engineering team

Skills

IAM design

Leadership

Scripting

AD / Entra ID / MFA / SSO

AI in IAM

Cybersecurity experience

Certifications (CISSP/CISM/CISA)

Communication

Tools

CyberArk

SailPoint

BeyondTrust

Saviynt

PowerShell

Python

AWS

Entra ID

Job description

Bupa is seeking an experienced Lead Cyber Security Engineer to drive IAM design, development and operation across our global estate. You will lead IGA, PAM and EIM initiatives, build automation, and ensure least-privilege access and zero-trust principles across cloud and on-prem systems.

In this role you will mentor a high-performing IAM engineering team, collaborate with IT, Security and HR, and support audits with IAM evidence and reporting.