IAM Platform Engineer – Identity, Entitlements & Authorisation

G-Research; Greater London; On-site; GBP 90,000 - 125,000; Full time

Benefits offered by this job

Annual discretionary bonus

35 days annual leave

9% company pension contributions

Healthcare and life assurance

Cycle-to-work scheme

Monthly company events

Job summary

G-Research, based in London, seeks an experienced IAM Platform Engineer to own and evolve our authentication and entitlement platforms. You will modernise identity infrastructure, replace bespoke patterns with scalable, standards‑based IAM services, and enable engineering teams to consume them securely.

You will lead lifecycle automation, build comprehensive entitlement catalogs, and improve access workflows. Join a leading quantitative research firm with strong benefits and growth opportunities.

Qualifications

• Experience administering Identity Governance and Administration platforms (IGA), preferably SailPoint IdentityIQ or equivalent.
• Strong understanding of JML processes, identity data flows and lifecycle automation.
• Experience integrating identity systems with HR tools such as Workday.

Responsibilities

• Improve Joiner, Mover, Leaver (JML) processes and lifecycle automation.
• Develop and maintain entitlement models and RBAC/ABAC policies.
• Build APIs and tooling to expose identity data to engineering teams.
• Automate identity workflows to reduce manual operations and support audits.
• Produce documentation, runbooks and evidence for compliance reviews.

Skills

IGA platforms

SailPoint IdentityIQ

Identity lifecycle

Workday integration

Active Directory

REST APIs

SCIM

Automation

Job description

We tackle the most complex problems in quantitative finance, by bringing scientific clarity to financial complexity.

From our London HQ, we unite world‑class researchers and engineers in an environment that values deep exploration and methodical execution - because the best ideas take time to evolve. Together we’re building a world‑class platform to amplify our teams’ most powerful ideas.

Security is foundational to this mission and must be delivered in a way that supports how our engineering teams build and operate complex systems at scale.

Take the next step in your career.

The role

We're looking for an experienced IAM Platform Engineer to own and evolve our authentication, identity federation, credential management and privileged access platforms.

You’ll help modernise our identity infrastructure, replacing bespoke authentication patterns with scalable, standards‑based IAM services that are secure, automated and easy for engineering teams to consume.

You’ll help shape the future of authentication and privileged access within one of the world's leading quantitative research firms, working on large‑scale engineering problems rather than traditional operational IAM.

Key responsibilities

• Improve Joiner, Mover, Leaver (JML) and organisational change processes
• Enhance identity lifecycle automation across Workday, IdentityIQ and Active Directory
• Build and maintain a comprehensive entitlement catalogue including:
  • Ownership
  • Business purpose
  • Risk classification
  • Approval models
  • Usage context
• Improve access request workflows and access certification processes
• Identify stale, orphaned and excessive access
• Engineer improvements to SailPoint IdentityIQ workflows, provisioning and connectors
• Reduce manual operational work through automation and self‑service capabilities
• Develop APIs and tooling to expose identity and entitlement data
• Produce operational documentation, runbooks and audit evidence
• Support compliance, security reviews and regulatory audits
• Design and improve modern entitlement models including RBAC, ABAC and policy-based access control

Who are we looking for?

We're looking for experience in the following areas:

• Engineering and operating Identity Governance and Administration (IGA) platforms, ideally SailPoint IdentityIQ or an equivalent solution.
• Identity lifecycle management, including Joiner, Mover and Leaver (JML) processes.
• Identity data integration with HR systems, ideally Workday.
• Active Directory, LDAP and enterprise identity data management.
• Entitlement governance, including entitlement metadata, ownership and access models.
• Access request, approval workflows, access reviews, certifications and attestations.
• Identity provisioning and integration technologies, including SCIM, REST APIs and SPML.
• Coding, platform configuration and automation to improve identity services and reduce manual operational effort.
• Working collaboratively with engineering, security and application teams to deliver scalable identity solutions.

Why join us?

• Highly competitive compensation plus annual discretionary bonus
• Lunch provided via Just Eat for Business and dedicated barista bar
• 35 days’ annual leave
• 9% company pension contributions
• Informal dress code and excellent work‑life balance
• Comprehensive healthcare and life assurance
• Cycle‑to‑work scheme
• Monthly company events