Identity and Access Management (IDAM) Engineer

National Gas; Warwick; On-site; GBP 63,000 - 77,000; Full time

Benefits offered by this job

Salary up to £70,000

Double-match pension

Annual performance bonus

26 days holiday + 8

10x salary life assurance

Flexible benefits package

Job summary

National Gas is seeking an IDAM Engineer to design, implement, and improve identity services that underpin secure access to systems and data. You will work on governance, access reviews, and hybrid directory services to support regulatory requirements.

The role focuses on SSO, MFA, PAM with CyberArk, PKI, and scripting in PowerShell to automate tasks and drive reliable operations. This is a full-time position in the UK, with competitive salary and benefits.

Qualifications

• Bachelor's degree in cyber security, computer science, information technology or a related subject, or equivalent professional experience in identity and access management.
• Strong administration experience with Microsoft Active Directory and Microsoft Entra ID, including hybrid identity.
• Practical knowledge of IAM and IGA principles, identity lifecycles, access governance, role-based access and least privilege.
• Experience supporting SSO, federation and MFA, with knowledge of SAML, OAuth 2.0, OIDC, LDAP and Kerberos.
• Hands-on experience with CyberArk or an equivalent PAM solution, together with PKI and certificate lifecycle support.
• Strong PowerShell automation, troubleshooting and analytical skills.

Responsibilities

• Deliver secure, reliable enterprise identity solutions and integrations that support business services and regulatory obligations.
• Ensure joiner, mover and leaver processes provide accurate provisioning and deprovisioning of access.
• Maintain effective identity governance, RBAC and access reviews with audit evidence.
• Maintain Active Directory and Entra ID services, including hybrid identity and directory structures.
• Implement and support SSO, federation, MFA and related authentication policies.
• Maintain PAM controls using CyberArk or equivalent PAM technology including vaulting and reviews.
• Support PKI, certificates and enterprise secrets management, ensuring secure handling of credentials.
• Develop PowerShell automation to reduce manual effort and improve operations.

Skills

PowerShell automation

IAM concepts

Troubleshooting

Analytical skills

Education

Bachelor's degree in cyber security/CS/IT

Tools

CyberArk

Microsoft Active Directory

Microsoft Entra ID

SAML

OIDC

OAuth 2.0

LDAP

Kerberos

PKI

Job description

At National Gas, the work we do matters.

As Britain's national gas network, we help keep the lights on, businesses running, and homes warm by maintaining the critical infrastructure that transports gas across Great Britain. While providing the energy security Britain relies on today, we're also helping transform the network for a clean energy future.

Join us and help secure Britain's energy.

About the role:

The Identity and Access Management (IDAM) Engineer designs, implements, supports and continually improves enterprise identity services, including identity governance, authentication, privileged access and directory services. The role enables secure, reliable and compliant access to systems and data while supporting organisational and regulatory requirements.

Key accountabilities:

• Deliver secure, reliable enterprise identity solutions and integrations that support business services and regulatory obligations.
• Ensure joiner, mover and leaver processes provide accurate, timely provisioning, modification and deprovisioning of access.
• Maintain effective identity governance, role-based and birthright access, entitlement ownership, segregation-of-duties controls, access reviews and audit evidence.
• Maintain Microsoft Active Directory and Microsoft Entra ID services, including hybrid identity, directory synchronisation, group structures, organisational units and access models.
• Implement and support single sign-on (SSO), federation, multi-factor authentication (MFA) and associated authentication policies and standards.
• Maintain privileged access controls using CyberArk or equivalent privileged access management (PAM) technology, including account vaulting, session controls, reviews and compliance processes.
• Support public key infrastructure (PKI), certificate lifecycle and enterprise secrets-management services, ensuring secure handling of credentials and cryptographic material.
• Develop PowerShell automation that reduces manual effort, improves control effectiveness and produces reliable operational outcomes.
• Deliver upgrades, migrations, incident remediation and service improvements with accurate technical documentation and procedures.
• Provide trusted identity and access management guidance to Cyber Security, Infrastructure, Application Support and business stakeholders.

About you:

• Bachelor’s degree in cyber security, computer science, information technology or a related subject, or equivalent professional experience in identity and access management.
• Strong administration experience with Microsoft Active Directory and Microsoft Entra ID, including hybrid identity.
• Practical knowledge of identity and access management (IAM) and identity governance and administration (IGA) principles, identity lifecycles, access governance, role-based access and least privilege.
• Experience supporting single sign-on (SSO), federation and multi-factor authentication (MFA), with knowledge of Security Assertion Markup Language (SAML), Open Authorization 2.0 (OAuth 2.0), OpenID Connect (OIDC), Lightweight Directory Access Protocol (LDAP) and Kerberos.
• Hands‑on experience with CyberArk or an equivalent privileged access management (PAM) solution, together with public key infrastructure (PKI) and certificate lifecycle support.
• Strong PowerShell automation, troubleshooting and analytical skills.

What we can offer you:

• Salary up to £70,000 (dependant on experience)
• Market-leading double-match pension (for every £1 you add, we add £2)
• Annual performance bonus
• 26 days holiday plus 8 statutory days and option to buy 5 additional days
• 10x salary life assurance and income protection
• Flexible opt-in salary sacrifice benefits including private healthcare, car, dental, and technology schemes
• Family-friendly policies, wellbeing support, and professional training and development opportunities

Security clearance:

This role is subject to National Security Vetting (NSV). Candidates must be eligible to obtain and maintain Security Clearance (SC) throughout their employment. For further information, visit GOV.UK (UK Security Vetting: Clearance Levels).

Inclusive recruitment:

We're building a workforce that reflects the communities we serve, championing diversity, and creating an inclusive workplace where everyone is valued for their unique contribution. We support reasonable adjustments throughout the recruitment process and beyond.

National Gas is a Disability Confident employer and signatory of the Armed Forces Covenant.