IAM Security Lead: Identity & Access Expert (Hybrid)

Bupa; Greater London; Hybrid; GBP 80,000 - 110,000; Full time

Benefits offered by this job

Private medical insurance

Enhanced pension scheme

Annual bonus scheme

25 days holiday + bank holidays

Hybrid working options

Job summary

Bupa is seeking an experienced Lead Cyber Security Engineer to architect and run IAM across BG IUK. You will lead design, configuration and operation of IGA, PAM and EIM, build automation and integrate IAM with AD, Entra ID and cloud services while promoting security-first practices.

Role requires 7+ years in cybersecurity with 5+ years in IAM leadership; strong scripting in PowerShell/Python and experience in regulated environments are essential.

Qualifications

• Proven expertise designing and operating IAM technologies (IGA/PAM/EIM).
• Hands-on knowledge of SAML, OAuth, OIDC, LDAP and Kerberos.
• Experience integrating IAM with cloud and on-prem systems.
• Strong scripting skills in PowerShell and Python for automation.

Responsibilities

• Lead design, configuration, integration and support of IGA, PAM and EIM tools.
• Build workflows, connectors and automation for access provisioning.
• Integrate IAM with Active Directory, Entra ID and cloud platforms.
• Troubleshoot IAM, access, authentication and identity issues.
• Implement least-privilege access and zero-trust governance.
• Support audits and provide IAM evidence and reporting.
• Monitor IAM platforms and manage remediation of incidents.
• Drive automation using PowerShell, Python and APIs.
• Collaborate with IT, Security, HR and business teams.
• Lead and develop a high-performing IAM engineering team.
• Foster innovation and security-first culture.

Skills

IGA/PAM/EIM design

Identity technologies

Cloud integration (AWS/GCP)

Scripting (PowerShell, Python)

Active Directory/Entra ID/MFA/SSO

Zero-trust & least-privilege

Security leadership

Education

IAM certifications (CISSP/CISM/CISA)

Tools

CyberArk

SailPoint

BeyondTrust

Saviynt

Job description

Bupa is seeking an experienced Lead Cyber Security Engineer to architect and run IAM across BG IUK. You will lead design, configuration and operation of IGA, PAM and EIM, build automation and integrate IAM with AD, Entra ID and cloud services while promoting security-first practices.

Role requires 7+ years in cybersecurity with 5+ years in IAM leadership; strong scripting in PowerShell/Python and experience in regulated environments are essential.