Lead Cyber Security Engineer - BeyondTrust, CyberArk

Bupa; Staines-upon-Thames; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Private medical insurance

Enhanced pension scheme

Annual bonus scheme

25 days holiday + bank holidays

Hybrid working options

Job summary

Bupa is seeking an IAM Lead Engineer to drive the design, development, and operation of identity and access management across Bupa Global, India and UK. You will lead the IGA, PAM and EIM initiatives, integrate with cloud services and on-prem systems, and guide a high-performing IAM team.

You should have 7+ years in cybersecurity or identity roles, 5+ years in IAM leadership, and relevant certifications. Strong scripting and collaboration across IT and security teams are essential.

Qualifications

• Experience designing and operating IGA/PAM/EIM technologies (CyberArk, SailPoint, BeyondTrust, Saviynt).
• Strong understanding of identity technologies (SAML, OAuth, OpenID Connect, LDAP, Kerberos).
• Experience integrating IAM with cloud services (AWS, GCP) and on-prem systems.
• Hands-on scripting (PowerShell, Python) and automation.
• Knowledge of Active Directory, Entra ID, MFA, SSO, federation and identity lifecycle.
• Understanding of AI use cases in IAM.
• 7+ years in cybersecurity or identity roles, 5+ years in IAM engineering leadership.
• Experience in regulated environments and large-scale enterprises.
• Certifications: CISSP, CISM, CISA or IAM-specific qualifications.
• Strong communication skills to explain technical concepts clearly.

Responsibilities

• Lead design, configuration, integration and support of IGA, PAM and EIM tools.
• Build workflows, connectors and automation for access provisioning.
• Integrate IAM with core apps, AD, Entra ID and cloud platforms.
• Troubleshoot IAM, access, authentication and identity issues.
• Implement least-privilege access and zero-trust principles.
• Support audits and IAM reporting.
• Monitor platforms, IAM incidents and remediation.
• Identify opportunities for automation using PowerShell, Python and APIs.
• Collaborate with IT, Security, HR and business teams to balance controls with user experience.
• Lead and develop a high-performing IAM engineering team.
• Promote innovation and security-first culture.

Skills

IGA

PAM

EIM

Identity governance

Zero trust

Least privilege

SAML

OAuth

OpenID Connect

LDAP

Entra ID

MFA

SSO

PowerShell

Python

APIs

AWS

GCP

CyberArk

SailPoint

BeyondTrust

Saviynt

Education

CISSP

CISM

CISA

Tools

CyberArk

SailPoint

BeyondTrust

Saviynt

Job description

Job Description: Lead Cyber Security Engineer | Beyond Trust, CyberArk Competitive Salary + Benefits Location: London / Staines / Salford Quays / Flexible Permanent – Full time

We make health happen At Bupa, we're here to help people live longer, healthier, happier lives.

With no shareholders, we reinvest our profits into improving the health of our customers and the quality of the services we provide.

As our IAM Lead Engineer, you will play a vital role in strengthening our security posture by leading the design, development and operation of identity and access management technologies across Bupa Global, India and UK (BGIUK).

Key Responsibilities

• Lead the design, configuration, integration and support of Identity Governance & Administration (IGA), Privileged Access Management (PAM) and Electronic Identity Management (EIM) tools.
• Build custom workflows, connectors and automation to support efficient access provisioning.
• Integrate IAM solutions with core applications, Active Directory, Entra ID and cloud platforms.
• Troubleshoot IAM, access, authentication and identity-related issues.
• Implement least-privilege access, zero-trust principles and compliant access governance.
• Support audits and produce IAM evidence and reporting.
• Monitor platforms, respond to IAM-related incidents and manage remediation.
• Identify opportunities for automation and orchestration using PowerShell, Python and APIs.
• Collaborate with IT, Security, HR and business teams to deliver solutions that balance strong controls with smooth user experience.
• Lead and develop a high-performing IAM engineering team.
• Promote a culture of innovation, continuous improvement and security-first thinking.

What We’re Looking For

• Experience designing and operating IGA/PAM/EIM technologies (CyberArk, SailPoint, BeyondTrust, Saviynt etc.).
• Strong understanding of identity technologies (SAML, OAuth, OpenID Connect, LDAP, Kerberos).
• Experience integrating IAM with cloud services (AWS, GCP) and on‑prem systems.
• Hands‑on experience with scripting (PowerShell, Python) and automation.
• Knowledge of Active Directory, Entra ID, MFA, SSO, federation and identity lifecycle.
• Understanding of AI use cases in IAM.
• 7+ years in cybersecurity or identity roles, 5+ years in IAM engineering leadership.
• Experience in regulated environments and large-scale enterprises.
• Professional certifications such as CISSP, CISM, CISA or IAM‑specific qualifications.
• Strong communication skills and ability to explain technical concepts clearly.

Benefits Our benefits are designed to make health happen for our people. Viva, our global wellbeing programme, supports mental, physical, financial, social and environmental wellbeing. We offer flexible working and a range of family‑friendly benefits. Upon joining Bupa you will receive the following benefits and more:

Benefits

• Private medical insurance
• Enhanced pension scheme
• Annual bonus scheme
• 25 days holiday + bank holidays
• Hybrid working options

Why Bupa We’re a health insurer and provider. With no shareholders, our customers are our focus. Our people are all driven by the same purpose – helping people live longer, healthier, happier lives and making a better world. We make health happen by being brave, caring and responsible in everything we do. We encourage all of our people to “Be you at Bupa”. We champion diversity and understand the importance of our people representing the communities and customers we serve. That’s why we especially encourage applications from people with diverse backgrounds and experiences. Bupa is a Level 2 Disability Confident Employer. We aim to offer an interview to every disabled applicant who meets the minimum criteria. We’ll make sure you’re treated fairly and offer reasonable adjustments throughout the recruitment process.

Time Type: Full time Job Area: Locations: Staines - Willow House Be at the heart of helping people live longer healthier, happier lives and making a better world. We employ more than 80,000 people globally who are making this a reality. If you’ve got the belief, the drive and the talent to help us in our ambition then we’d like to hear from you. Wherever you work, one thing stands out about Bupa people. Our customers are our passion – they’re at the heart of our positively different culture of care. At Bupa you’ll be challenged, you’ll be encouraged to innovate, and collaborate with colleagues who are committed to delivering exceptional experiences. We trust, respect and consider everyone, knowing your difference will make the difference.