IAM Platform Engineer – Identity, Entitlements & Authorisation

Barlowe LLP; Greater London; On-site; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Competitive compensation

Annual discretionary bonus

Lunch provided

35 days annual leave

Company pension contributions

Healthcare and life assurance

Cycle‑to‑work

Job summary

G-Research in London is seeking an experienced Identity Governance and Administration engineer to join our security and engineering teams from our London HQ. You will help shape access controls and lifecycle management for a cutting‑edge financial research platform.

You will implement JML, automate lifecycle workflows across Workday, IdentityIQ and Active Directory, and design entitlement models, APIs and self‑service tools to scale identity services.

Qualifications

• Experience in engineering and operating Identity Governance and Administration (IGA) platforms, ideally SailPoint IdentityIQ or an equivalent solution.
• Identity lifecycle management, including Joiner, Mover and Leaver (JML) processes.
• Identity data integration with HR systems, ideally Workday.
• Active Directory, LDAP and enterprise identity data management.
• Entitlement governance, including entitlement metadata, ownership and access models.
• Access request, approval workflows, access reviews, certifications and attestations.
• Identity provisioning and integration technologies, including SCIM, REST APIs and SPML.
• Coding, platform configuration and automation to improve identity services and reduce manual operational effort.
• Working collaboratively with engineering, security and application teams to deliver scalable identity solutions.

Responsibilities

• Improve Joiner, Mover, Leaver (JML) and organisational change processes
• Enhance identity lifecycle automation across Workday, IdentityIQ and Active Directory
• Build and maintain a comprehensive entitlement catalogue including ownership, business purpose, risk classification, approval models and usage context
• Improve access request workflows and access certification processes
• Identify stale, orphaned and excessive access
• Engineer improvements to SailPoint IdentityIQ workflows, provisioning and connectors
• Reduce manual operational work through automation and self‑service capabilities
• Develop APIs and tooling to expose identity and entitlement data
• Produce operational documentation, runbooks and audit evidence
• Support compliance, security reviews and regulatory audits
• Design and improve modern entitlement models including RBAC, ABAC and policy‑based access control

Skills

IGA platforms

JML processes

Workday integration

Active Directory

Entitlement governance

Access workflows

SCIM & REST APIs

Automation

Cross-functional collaboration

Job description

Overview

We tackle the most complex problems in quantitative finance, by bringing scientific clarity to financial complexity. From our London HQ, we unite world‑class researchers and engineers in an environment that values deep exploration and methodical execution – because the best ideas take time to evolve. Together we’re building a world‑class platform to amplify our teams’ most powerful ideas. Security is foundational to this mission and must be delivered in a way that supports how our engineering teams build and operate complex systems at scale. Take the next step in your career.

Key Responsibilities

• Improve Joiner, Mover, Leaver (JML) and organisational change processes
• Enhance identity lifecycle automation across Workday, IdentityIQ and Active Directory
• Build and maintain a comprehensive entitlement catalogue including ownership, business purpose, risk classification, approval models and usage context
• Improve access request workflows and access certification processes
• Identify stale, orphaned and excessive access
• Engineer improvements to SailPoint IdentityIQ workflows, provisioning and connectors
• Reduce manual operational work through automation and self‑service capabilities
• Develop APIs and tooling to expose identity and entitlement data
• Produce operational documentation, runbooks and audit evidence
• Support compliance, security reviews and regulatory audits
• Design and improve modern entitlement models including RBAC, ABAC and policy‑based access control

Qualifications

• Experience in engineering and operating Identity Governance and Administration (IGA) platforms, ideally SailPoint IdentityIQ or an equivalent solution
• Identity lifecycle management, including Joiner, Mover and Leaver (JML) processes
• Identity data integration with HR systems, ideally Workday
• Active Directory, LDAP and enterprise identity data management
• Entitlement governance, including entitlement metadata, ownership and access models
• Access request, approval workflows, access reviews, certifications and attestations
• Identity provisioning and integration technologies, including SCIM, REST APIs and SPML
• Coding, platform configuration and automation to improve identity services and reduce manual operational effort
• Working collaboratively with engineering, security and application teams to deliver scalable identity solutions

Benefits

• Highly competitive compensation plus annual discretionary bonus
• Lunch provided via Just Eat for Business and dedicated barista bar
• 35 days’ annual leave
• 9% company pension contributions
• Informal dress code and excellent work‑life balance
• Comprehensive healthcare and life assurance
• Cycle‑to‑work scheme
• Monthly company events

Inclusion & EEO Statement

G-Research is committed to cultivating and preserving an inclusive work environment. We are an ideas‑driven business and we place great value on diversity of experience and opinions. We want to ensure that applicants receive a recruitment experience that enables them to perform at their best. If you have a disability or special need that requires accommodation, please let us know in the relevant section.