Senior IAM Architect: Identity Security & Governance

AGS; England; On-site; GBP 65,000 - 90,000; Full time

Job summary

AGS is seeking a Senior Identity & Access Management Specialist to join our Cyber Security function in Warwickshire. The role focuses on designing and maturing IAM capabilities, balancing design, governance and operations across a global environment.

You will work with Cyber Security, Engineering, Architecture and Infrastructure to embed secure identity principles, manage lifecycle processes and deliver scalable identity solutions for cloud and on-premise platforms.

Qualifications

• Strong hands-on experience designing, implementing or improving IAM or PAM within an enterprise
• Experience transforming an existing identity capability or developing IAM services towards a defined target state
• Strong knowledge of identity lifecycle management and JML processes
• Experience managing user, privileged and service identities across cloud and on-premise environments
• Practical experience with cloud identity services – cloud experience is essential
• Experience with Active Directory, Microsoft Entra ID/Azure AD or similar enterprise identity platforms
• Strong understanding of authentication, authorisation, RBAC, least privilege, access governance and segregation of duties
• Experience translating security, risk and compliance requirements into practical technical controls
• Experience working with Architecture and Engineering teams to influence secure technology design
• Exposure to access reviews, recertification, privileged access controls, audit and identity governance
• Strong analytical and problem-solving skills when dealing with complex identity and access issues
• Confident communication and stakeholder-management skills, with the ability to challenge existing processes constructively
• A proactive approach and a genuine focus on continuous improvement

Responsibilities

• Design, develop and improve IAM capabilities, controls, standards and operating processes.
• Assess the existing identity estate, identifying security gaps, risks and opportunities for improvement.
• Develop effective Joiner, Mover and Leaver (JML) processes across employee, contractor, privileged, service and system identities.
• Define and implement authentication, authorisation, RBAC, least privilege and segregation of duties controls.
• Support the transition from traditional Microsoft identity services towards Microsoft Entra ID.
• Establish and enhance IAM governance, including access reviews, recertification, role modelling, audit evidence and control assurance.
• Develop privileged access controls, elevated-access workflows and privileged account lifecycle management.
• Work with Engineering, Architecture, Infrastructure and Application teams to embed secure identity principles into technology and solution designs.
• Define scalable identity patterns for enterprise applications, SaaS platforms, APIs and cloud services.
• Investigate identity-related incidents, access exceptions and control failures, escalating risks where appropriate.
• Identify opportunities to automate access requests, approvals, lifecycle processes, reporting and other IAM activities.
• Produce clear technical documentation, standards, procedures and guidance.
• Work with internal teams, external suppliers and managed service partners to deliver IAM improvements.
• Provide technical guidance to both technical and non-technical stakeholders, translating identity risks into practical solutions.

Skills

IAM design

PAM experience

RBAC

Least privilege

Segregation of duties

Cloud identity services

Active Directory/Azure AD

JML processes

Job description

AGS is seeking a Senior Identity & Access Management Specialist to join our Cyber Security function in Warwickshire. The role focuses on designing and maturing IAM capabilities, balancing design, governance and operations across a global environment.

You will work with Cyber Security, Engineering, Architecture and Infrastructure to embed secure identity principles, manage lifecycle processes and deliver scalable identity solutions for cloud and on-premise platforms.