Senior Cyber Security IAM Analyst

OneAdvanced Limited; Birmingham; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Wellbeing focused

Annual leave 20 days + holidays

Employee Assistance Programme

Development Programmes

Online Learning Platform SkillsHub!

Life Insurance

Personal Accident Insurance

Performance Bonus

Job summary

OneAdvanced Limited in Birmingham, England, seeks an experienced IAM/PAM professional to lead the design, build and deployment of a next-generation Privileged Access Management capability. You will work with CTO stakeholders to select tools, define processes, and extend controls to AI identities, while expanding governance across IAM operations.

The role covers identity governance, policy development, and risk management, with opportunities to mentor teams and influence security strategy across

Qualifications

• Minimum 6+ years of hands-on experience in Identity and Access Management with PAM as core
• Deep PAM experience including vault administration, credential rotation and session management
• Experience building out a PAM capability (tool selection, deployment and process design) is highly advantageous
• Bachelor’s degree in computer science, Information Technology, or related field
• Relevant certifications in Windows (Azure, Active Directory) and/or AWS desirable

Responsibilities

• Design, build out, and deploy our next-generation PAM capability from tool selection through to production rollout
• Partner with CTO stakeholders to implement PAM tool and supporting processes, standards, and controls
• Extend privileged access controls to non-human and agentic AI identities, securing credentials and just-in-time access
• Automate core PAM operations, including credential rotation, session monitoring, and vault hygiene
• Grow into subject-matter expert for PAM and advise teams on policy and standards
• Implement and manage IAM systems across platforms such as Active Directory, LDAP, and Entra
• Manage user accounts, groups, and permissions; grant/deny access based on role
• Configure and enforce access policies; monitor IAM activity and investigate anomalies
• Provide IAM tooling guidance and project administration; integrate IAM into IT infrastructure
• Support non-human identities lifecycle including authentication, authorization, monitoring, de-provisioning
• Assist audits with IAM risk and control activities and evidence gathering
• Document IAM processes and procedures
• Run access certification campaigns and manage joiner/m mover/leaver workflows
• Develop and report IAM, PAM, and IGA KPIs; deliver training to staff
• Track IAM tooling developments and propose options to leadership
• Support identity-related projects with the Director of IAM

Skills

PAM experience

IAM concepts

Scripting skills

Independent worker

Education

Bachelor's degree in computer science or related field

Certifications: Windows Azure / Active Directory / AWS

Tools

CyberArk

SailPoint

Okta

Ping Identity

PowerShell

Python

Ruby

Active Directory

Entra

LDAP

SQL Server

Azure

Windows

Unix/Linux

Job description

Role Introduction

At OneAdvanced, we develop and host multiple software products and manage a large technical infrastructure spanning Public Cloud, Private Cloud, and on-premise data centres. We are building an AI-first business, and we invest heavily in security and engineering to build, run, and protect our products and customer data with confidence.

This role sits withinour Identity and Access Management (IAM) function and reports to the Director of IAM. It is central to a major investment for us: the design, build, and deployment of our next-generation Privileged Access Management (PAM) capability. Working closely with technical stakeholders across the CTO organisation, you will help select and implement a new PAM tool and the processes and controls that surround it — including how we secure privileged access for the non-human and agentic AI identities that increasingly run in our environment. As the capability matures, you will grow into the subject-matter expert who supports and governs privileged access across the company.

What You Will Do

Privileged Access Management (primary focus)

• Help design, build out, and deploy our next-generation PAM capability, from tool selection through to production rollout.
• Partner with technical stakeholders across the CTO organisation to implement the new PAM tool and the supporting processes, standards, and controls.
• Extend privileged access controls to non-human and agentic AI identities, securing the credentials, secrets, and just-in-time access these workloads depend on.
• Execute and progressively automate core PAM operations, including credential rotation, privileged session monitoring, and vault hygiene.
• Grow into the subject-matter expert for PAM, helping to govern privileged access policy and standards and advising teams across the business.

Identity and Access Management Operations

• Implement and manage identity and access control systems across key strategic platforms, including Active Directory, LDAP, and Entra.
• Manage user accounts, groups, and permissions across the IAM system.
• Grant or deny day-to-day access requests based on user role and privilege, ensuring the right people have access to the right resources.
• Work with internal customers, business analysts, and application teams to understand and implement access requirements.
• Configure and enforce access policies and procedures.
• Monitor user activity across the IAM system and investigate anomalies.
• Collaborate with internal teams to deliver access control initiatives aligned with corporate security policy and compliance standards.
• Troubleshoot IAM-related issues and design effective solutions.
• Provide expert guidance on IAM tools, technologies, and best practice.
• Integrate IAM solutions seamlessly into the broader IT infrastructure.
• Support the operational lifecycle of non-human and agentic identities, including authentication, authorisation, monitoring, and de‑provisioning.
• Support evaluation and adoption of IAM tooling and automation to reduce manual administration.
• Support IAM risk and control activities, including evidence gathering for internal and external audits (e.g. ISO 27001).
• Document IAM processes and procedures.

Identity Governance and Administration Support

• Run access certification campaigns, process joiner‑mover‑leaver requests, and remediate dormant or orphaned accounts.
• Maintain the entitlement catalogue and flag gaps or anomalies to IAM leadership.

Reporting and Continuous Improvement

• Develop, monitor, and report on IAM, PAM, and IGA metrics and KPIs, and prepare clear, concise status reports for management.
• Deliver IAM training and awareness sessions for technical and non-technical staff.
• Track emerging IAM tools and industry developments and raise relevant options with IAM leadership.
• Support identity-related projects end-to-end, working alongside the Director of IAM on strategic delivery.

What You Will Have

Required Experience and Qualifications

• Minimum 6+ years of hands‑on experience in Identity and Access Management, with strong, demonstrable Privileged Access Management (PAM) experience at its core.
• Deep, hands‑on Privileged Access Management experience is essential — including vault administration, credential rotation, and privileged session management — ideally gained in modern cloud and agentic AI environments.
• Experience implementing or building out a PAM capability (tool selection, deployment, and process design) is highly advantageous, as is practical exposure to Identity Governance and Administration operations such as access certification campaigns.
• Bachelor’s degree in computer science, Information Technology, or a related field.
• Relevant certifications in Windows (Azure, Active Directory) and/or AWS are highly desirable.

Non-Technical Skills

• Strong understanding and ability to articulate the organisation's IAM strategy.
• Knowledge of IAM tools and the ability to recommend suitable operational approaches.
• Strong understanding of security concepts and how they apply to IAM.
• Excellent organisational skills with attention to detail.
• Strong analytical and problem-solving skills.
• Effective communication and project administration abilities.
• Ability to work independently and collaboratively as part of a team.
• Capability to develop and deliver training to diverse audiences.

Technical Skills

• Experience with directory services such as LDAP, Active Directory, and Entra.
• Knowledge of security protocols including SSH and TLS.
• Proficiency in scripting languages such as PowerShell, Python, or Ruby.
• Hands‑on experience administering PAM tooling (e.g. CyberArk), including vaulting, credential rotation, and session monitoring; familiarity with secrets management for machine, service, and agentic AI identities is a plus.
• Hands‑on experience with IGA tooling (e.g. SailPoint), including access certification campaigns and joiner‑mover‑leaver workflows.
• Familiarity with other IAM tools (e.g. Secret Server, Okta, Ping Identity).
• Familiarity with database concepts and relational databases such as Microsoft SQL Server.
• Comfortable working across multiple operating systems including Azure, Windows, Unix/Linux.

#LI-PB1

What We Do For You

• Wellbeingfocused–Ourpeopleareourgreatestassets,andensuringeveryonefeelstheirbestself tocometoworkisintegral.
• AnnualLeave–20daysofannualleave,pluspublicholidays
• EmployeeAssistanceProgramme–Freeadvice,support,andconfidentialcounsellingavailable24/7.
• Personal Growth- Regardless of where you are at in your career, we’re committed to enabling your growth personally and professionally
  • Development Programmes– From Future Managers to Leadership Training, our development programmes help you get where you need to go
  • Online Learning Platform: SkillsHub! - Learning at your fingertips, anytime from anywhere. You can access our online library with relevant content for your career growth.
• Life Insurance - 3x annual salary
• Personal Accident Insurance - providing cover in the event of serious injury/illness.
• Performance Bonus– Our Group-wide bonus scheme enables you to reap the rewards of your success

Who We Are

At OneAdvanced, we are at the forefront of delivering sector-focused technology solutions that simplify complexity, drive meaningful progress, and help build a fairer, more inclusive society.

We’re much more than a software company. We deliver SaaS workflow applications and IT services that power organisations across Education, Government, Healthcare, Legal, Manufacturing, Housing, Retail, and more.

OneAdvanced is one of the UK’s largest business software and services companies. Based in Birmingham (The Mailbox), operating across the UK, Ireland, India, and Australia.

Our secure, scalable platform, including OneAdvanced AI, our private AI service for UK organisations, powers connectivity and innovation across critical sectors. Alongside our software are our IT services, including hosting, managed services, and application modernisation.

We strive to create an inclusive workplace that drives innovation and collaboration, championing diverse perspectives and ideas. Our Environmental, Social and Governance (ESG) strategy is embedded in everything we do, guiding us to create meaningful impact for our people, our customers and the planet.

Join us and become part of a team that’s powering the world of work and making a real difference.

Learn more at www.oneadvanced.com