Identity and Access Management Engineer

The Maples Group (Financial Services); Leeds; On-site; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid working

Comprehensive health coverage (medical

Competitive vacation packages

Educational assistance and development

Savings or pension plan

Life insurance

Travel insurance

Global mental wellness programme

Sports clubs and social events

Job summary

The Maples Group in Leeds is seeking an Identity and Access Management Engineer to implement, maintain and support IAM tools and controls across the firm's security program. You will strengthen identity security across governance, PAM, authentication, federation, MFA and related initiatives.

This role requires 5+ years in IAM, knowledge of SAML, OAuth, OpenID Connect (OIDC), and experience with platforms like Entra ID, CyberArk or Okta.

Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity or a related discipline.
• 5+ years of experience supporting, implementing or administering enterprise IAM solutions, with practical experience in IGA, PAM, SSO, federation, MFA, lifecycle management or access governance
• Understanding of authentication and authorization standards, including, SAML, OAuth, OpenID Connect (OIDC), LDAP and Kerberos
• Experience with IAM platforms such as Active Directory, Microsoft Entra ID, CyberArk, SailPoint, ClearSkye, Okta, Ping Identity or equivalent technologies would be advantageous
• Experience in integrating applications with identity providers and access management solutions
• Experience executing access reviews, RBAC initiatives and governance activities
• CISSP (Associate) and/or Microsoft Certified: Identity and Access Administrator Associate (SC-300) or equivalent cybersecurity / identity-security focused certification are preferred
• Familiarity with Windows servers, GPO, Networking
• Scripting or automation using PowerShell, Python, REST APIs or Microsoft Graph API
• Strong troubleshooting and problem-solving skills with the ability to perform root cause analysis
• Excellent communication and documentation skills
• Ability to think critically, challenge existing approaches, and propose practical improvements
• Self-motivated team player who takes ownership and can work effectively across technical and non-technical teams

Responsibilities

• Support and administer enterprise IAM platforms across IGA, PAM, SSO, federation, MFA and lifecycle management
• Support Joiner, Mover and Leaver (JML) processes, role management and access provisioning activities
• Support access control evidence gathering, access review reporting, privileged access validation and remediation tracking for internal and external audits
• Implement and support modern identity security capabilities including: Microsoft Entra ID, Conditional Access, Privileged Identity Management (PIM), Windows Hello for Business, FIDO2 Authentication and Identity Threat Detection and Response (ITDR)
• Participate in Zero Trust security initiatives and identity-centric security programs
• Support application onboarding and integration activities for: SAML, OAuth, OpenID Connect (OIDC), SCIM Provisioning and Federation Services
• Support internal and external audit activities, including evidence collection and control validation
• Maintain IAM operational procedures, standards, technical documentation and support guides
• Assist with remediation of audit findings and compliance requirements
• Maintain awareness of evolving identity security threats, industry best practices and regulatory requirements
• Participate in identity transformation initiatives and projects aimed at improving security, operational efficiency and user experience
• Contribute to the evolution of the firm's identity-first and Zero Trust security strategy
• Support modernization efforts involving cloud identity, identity governance and privileged access management technologies
• Understand the organisation's mission, values, operations, goals, risks and risk tolerance
• Assist in the implementation and operation of the security programmes and projects as required
• Maintain technical security knowledge by attending training courses, educational workshops where required

Skills

IAM

Identity Governance

Privileged Access Management

Single Sign-On

MFA / Passwordless

RBAC / Access Governance

PowerShell / Python

Documentation

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity or related

Tools

Microsoft Entra ID

CyberArk

SailPoint

Okta

Ping Identity

ClearSkye

Job description

Description

The Maples Group is a standard bearer in financial and legal services, trusted by many of the world's largest hedge fund managers, private equity firms and international corporations.

Our distinction flows from our carefully curated team: 2,500+ professionals characterised by tenacity, ethics and exacting excellence. Operating in key financial centres across the Americas, Asia, Europe and the Middle East, our international presence offers a unique springboard for career development and cross-cultural immersion. Our side-by-side financial and legal services are similarly ripe for interdisciplinary learning and growth.

The Maples Group looks to add a Leeds based Identity and Access Management Engineer to our team and invites eager and qualified candidates to apply. We are committed to diversity, inclusion and equality of opportunity as we attract, retain and develop world-class talent.

Who We Seek

Our merit-based culture suits professionals in pursuit of boundless careers and lives. Beyond their acumen, team members are collaborative and conscientious, bringing a healthy sense of drive and purpose to each interaction and to all aspects of their work.

About the Role

The Identity and Access Management Engineer is responsible for implementing, maintaining and supporting the tools, processes and controls that underpin the firm's Identity and Access Management programme. The successful candidate will help strengthen identity security across Identity Governance, Privileged Access Management, Authentication, Federation, Access Reviews and Identity Threat Detection initiatives.

Key responsibilities include:

• Support and administer enterprise IAM platforms and services across
  • Identity Governance and Administration (IGA)
  • Privileged Access Management (PAM)
  • Single Sign-On (SSO)
  • Federation
  • Multi-Factor Authentication (MFA)
  • Passwordless Authentication
  • Identity Lifecycle Management
• Support Joiner, Mover and Leaver (JML) processes, role management and access provisioning activities
• Support access control evidence gathering, access review reporting, privileged access validation and remediation tracking for internal and external audits
• Implement and support modern identity security capabilities including: Microsoft Entra ID, Conditional Access, Privileged Identity Management (PIM), Windows Hello for Business, FIDO2 Authentication and Identity Threat Detection and Response (ITDR)
• Participate in Zero Trust security initiatives and identity-centric security programs
• Support application onboarding and integration activities for: SAML, OAuth, OpenID Connect (OIDC), SCIM Provisioning and Federation Services
• Support internal and external audit activities, including evidence collection and control validation
• Maintain IAM operational procedures, standards, technical documentation and support guides
• Assist with remediation of audit findings and compliance requirements
• Maintain awareness of evolving identity security threats, industry best practices and regulatory requirements
• Participate in identity transformation initiatives and projects aimed at improving security, operational efficiency and user experience
• Contribute to the evolution of the firm's identity-first and Zero Trust security strategy
• Support modernization efforts involving cloud identity, identity governance and privileged access management technologies
• Understand the organisation's mission, values, operations, goals, risks and risk tolerance
• Assist in the implementation and operation of the security programmes and projects as required
• Maintain technical security knowledge by attending training courses, educational workshops where required

EXPERIENCE

What You Bring

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity or a related discipline
• 5+ years of experience supporting, implementing or administering enterprise IAM solutions, with practical experience in one or more IAM domains such as IGA, PAM, SSO, federation, MFA, lifecycle management or access governance
• Understanding of authentication and authorization standards, including, SAML, OAuth, OpenID Connect (OIDC), LDAP and Kerberos
• Experience with IAM, IGA, PAM or access management platforms such as Active Directory, Microsoft Entra ID, CyberArk, SailPoint, ClearSkye, Okta, Ping Identity or equivalent technologies would be advantageous
• Experience in integrating applications with identity providers and access management solutions
• Experience executing access reviews, role-based access control (RBAC) initiatives and governance activities
• CISSP (Associate), and/or Microsoft Certified: Identity and Access Administrator Associate (SC-300) or equivalent cybersecurity / identity-security focused certification are preferred
• Familiarity with Windows servers, GPO, Networking
• Familiarity with scripting or automation using PowerShell, Python, REST APIs or Microsoft Graph API
• Strong troubleshooting and problem-solving skills with the ability to perform root cause analysis
• Excellent communication and documentation skills
• Ability to think critically, challenge existing approaches, and propose practical improvements
• Self-motivated team player who takes ownership and can work effectively across technical and non-technical teams

BENEFITS & REWARDS

The most enduring professional relationships are reciprocal relationships. The Maples Group prioritises employee health and wellbeing. Depending on your location, we offer a range of benefits, including:

• Hybrid working
• Comprehensive health coverage (medical, dental and optical)
• Competitive vacation packages
• Educational assistance and professional development programmes
• Savings or pension plan
• Life insurance
• Travel insurance
• Global mental wellness programme
• Sports clubs and social events

ABOUT MAPLES GROUP

Over five decades, the Maples Group has grown from modest beginnings into one of the world's preeminent professional services firms, offering specialised fiduciary, fund administration, regulatory and compliance, entity formation and management and legal services on the laws of the British Virgin Islands, the Cayman Islands, Ireland, Jersey and Luxembourg.

You can learn more about the Maples Group on our corporate website. Experience our culture and our people on our Careers Page or on LinkedIn.

Maples' standard policy to undertake various background screening checks, including criminal records checks, on all applicants to whom a conditional job offer is made. Maples will only ask applicants to disclose a past criminal conviction when a conditional job offer is made. If you have a criminal record it does not mean that your job offer will be automatically withdrawn. Maples will make all job offer decisions on a case by case basis and will take a number of factors into account, such as the role that you are applying for and the nature and circumstances of the past offence. You will have the opportunity to discuss the matter with Maples before a decision is made.

Disclaimer: All personal information collected during the application process will be used for recruitment-related purposes only. Please refer to our Job Applicant Privacy Notice at maples.com/privacy for details on how we handle personal information relating to job applicants.