Security Engineer – Identity and Access Management, IAM

Jobtailor; Milton Keynes; On-site; GBP 60,000 - 90,000; Full time

Job summary

Jobtailor is seeking an experienced IAM professional to manage user lifecycles, access governance, and application onboarding across Microsoft Entra ID and cloud platforms. You will balance BAU operations with hands-on engineering, driving automation and clear ownership across security and technology teams.

Strong knowledge of SSO, SCIM, PIM, and regulatory controls is essential. You will collaborate with application owners and stakeholders to deliver auditable controls in a FCA/PRA-regulated

Qualifications

• Experience in Identity and Access Management, Security Operations, Cloud Security or technical operations, ideally within a regulated or control-focused environment.
• Good hands‑on knowledge of Microsoft Entra ID and Azure identity, access management and security controls, including users, groups, Enterprise Applications, SSO, Conditional Access, Privileged Identity Management and access management controls.
• Understanding of IAM principles and controls, including least privilege, RBAC, privileged access, joiner/mover/leaver processes and segregation of duties.
• Experience supporting access reviews, remediation, audit evidence and operational controls.
• Experience balancing BAU operational work with hands‑on engineering, including improving processes, writing or adapting scripts, documenting workflows and automating repeatable tasks.
• Experience with Microsoft Entra Identity Governance, Conditional Access, PIM, access reviews and Enterprise Applications.
• Experience with Microsoft Graph, PowerShell, Logic Apps, Azure Functions or similar automation tooling.
• Experience with Azure identity, access management and security controls.
• Experience with SAML, SCIM, OAuth, OpenID Connect, SSO onboarding and secure provisioning patterns.
• Experience with Google Cloud Platform IAM governance, access models, engineering standards and automation.
• Experience with 1Password or similar credential management platforms.
• Experience with cloud audit logging and identity monitoring.
• Experience with service desk and IT workflow platforms.
• Able to work with application owners, Technology, Security, suppliers and non‑technical stakeholders.
• Strong analytical and problem‑solving skills
• Clear written and verbal communication skills in plain English
• Understands effective, auditable controls in an FCA/PRA‑regulated environment

Responsibilities

• Operate and maintain IAM services, including user lifecycle management, access requests, provisioning, deprovisioning and access changes across Microsoft Entra ID and integrated applications
• Manage identity governance and access controls, including RBAC, least-privilege access, Conditional Access and PIM
• Manage access reviews and certifications, including reviewer engagement, evidence collection, exception handling, remediation tracking and reporting
• Onboard and integrate applications into IAM/IGA, including SSO, SAML/OIDC, SCIM provisioning and secure authentication using Microsoft Entra ID
• Support application and vendor onboarding from an IAM perspective
• Maintain IAM controls and audit evidence for internal and external audits and regulatory requirements
• Deliver improvements through automation, improved workflows, better request processes, clearer ownership and enhanced reporting
• Support identity-related issues and investigations with application owners, Technology, Security and other stakeholders
• Maintain IAM documentation and operational standards, including process guides, access models, onboarding standards, control evidence and runbooks
• Support Azure identity, access management and security controls, credential lifecycle management, and Google Cloud IAM governance, engineering and automation
• Report IAM risks, control status, work in progress, blockers and remediation actions to Security leadership
• Support related control and regulatory activities, including Risk Smart Indicators and Data Subject Access Requests

Skills

Analytical Skills

Problem-Solving Skills

Clear Communication

Tools

Microsoft Entra ID

Azure Identity Management

PowerShell

Logic Apps

Azure Functions

SAML

SCIM

OAuth

OpenID Connect

Microsoft Graph

1Password

Job description

• Operate and maintain IAM services, including user lifecycle management, access requests, provisioning, deprovisioning and access changes across Microsoft Entra ID and integrated applications
• Manage identity governance and access controls, including RBAC, least-privilege access, Conditional Access and PIM
• Manage access reviews and certifications, including reviewer engagement, evidence collection, exception handling, remediation tracking and reporting
• Onboard and integrate applications into IAM/IGA, including SSO, SAML/OIDC, SCIM provisioning and secure authentication using Microsoft Entra ID
• Support application and vendor onboarding from an IAM perspective
• Maintain IAM controls and audit evidence for internal and external audits and regulatory requirements
• Deliver improvements through automation, improved workflows, better request processes, clearer ownership and enhanced reporting
• Support identity-related issues and investigations with application owners, Technology, Security and other stakeholders
• Maintain IAM documentation and operational standards, including process guides, access models, onboarding standards, control evidence and runbooks
• Support Azure identity, access management and security controls, credential lifecycle management, and Google Cloud IAM governance, engineering and automation
• Report IAM risks, control status, work in progress, blockers and remediation actions to Security leadership
• Support related control and regulatory activities, including Risk Smart Indicators and Data Subject Access Requests

Requirements

• Experience in Identity and Access Management, Security Operations, Cloud Security or technical operations, ideally within a regulated or control-focused environment
• Good hands‑on knowledge of Microsoft Entra ID and Azure identity, access management and security controls, including users, groups, Enterprise Applications, SSO, Conditional Access, Privileged Identity Management and access management controls
• Understanding of IAM principles and controls, including least privilege, RBAC, privileged access, joiner/mover/leaver processes and segregation of duties
• Experience supporting access reviews, remediation, audit evidence and operational controls
• Experience balancing BAU operational work with hands‑on engineering, including improving processes, writing or adapting scripts, documenting workflows and automating repeatable tasks
• Experience with Microsoft Entra Identity Governance, Conditional Access, PIM, access reviews and Enterprise Applications
• Experience with Microsoft Graph, PowerShell, Logic Apps, Azure Functions or similar automation tooling
• Experience with Azure identity, access management and security controls
• Experience with SAML, SCIM, OAuth, OpenID Connect, SSO onboarding and secure provisioning patterns
• Experience with Google Cloud Platform IAM governance, access models, engineering standards and automation
• Experience with 1Password or similar credential management platforms
• Experience with cloud audit logging and identity monitoring
• Experience with service desk and IT workflow platforms
• Able to work with application owners, Technology, Security, suppliers and non‑technical stakeholders
• Strong analytical and problem‑solving skills
• Clear written and verbal communication skills in plain English
• Understands effective, auditable controls in an FCA/PRA‑regulated environment

Core Competencies

Demonstrates expertise in Identity and Access Management (IAM) with a focus on Microsoft Entra ID, Azure identity controls, and automation of IAM processes. Proficient in managing access governance, conducting access reviews, and ensuring compliance with regulatory standards.

Highest‑signal resume keywords

• Identity And Access Management
• Microsoft Entra ID
• Azure Identity Management
• Access Reviews
• Automation Tools

Hard Skills

• User Lifecycle Management
• Role‑Based Access Control
• Privileged Identity Management
• SAML
• SCIM
• OAuth
• OpenID Connect
• Microsoft Graph
• PowerShell
• Cloud Security

Soft Skills

• Analytical Skills
• Problem‑Solving Skills
• Clear Communication

Industry Keywords

• Regulated Environment
• Audit Evidence
• Access Controls
• Data Subject Access Requests
• FCA/PRA Compliance

Tools & Technologies

• Microsoft Entra Identity Governance
• Azure Functions
• Logic Apps
• 1Password
• Service Desk Platforms