Senior IAM Design & Governance Architect

AGS; England; On-site; GBP 70,000 - 95,000; Full time

Job summary

AGS in Warwickshire seeks a Senior Identity & Access Management Specialist to lead design, governance, and lifecycle management of IAM across a large, complex enterprise.

You will assess the current IAM landscape, define a target state, and deliver secure identity solutions across on‑premises, cloud and SaaS environments, collaborating with Engineering, Architecture and Security teams to balance security with user experience.

Qualifications

• Strong hands-on experience designing, implementing or improving IAM or PAM in an enterprise environment.
• Experience establishing IAM services or transforming identity environments.
• Knowledge of identity lifecycle management (joiners/movers/leavers).
• Experience managing user, privileged, and service identities across cloud and on‑premise environments.
• Cloud-based identity services experience is essential.
• Knowledge of Active Directory and Microsoft Entra ID/Azure AD.

Responsibilities

• Design, develop and enhance IAM capabilities and controls.
• Review the existing identity environment to identify weaknesses and risks.
• Define target IAM state and contribute to the roadmap.
• Develop secure identity solutions across enterprise apps, cloud services, SaaS platforms and APIs.
• Establish authentication, authorisation, RBAC, least privilege and segregation of duties.
• Support transition from Microsoft identity services to Microsoft Entra ID.
• Develop identity lifecycle processes covering joiners, movers and leavers.
• Ensure access provisioning, amendments and removals with auditability.
• Support lifecycle management for employees, contractors and system identities.
• Automate access requests, approvals, provisioning and reporting.
• Improve consistency across identity and access processes.
• Strengthen IAM governance and control processes.
• Support access reviews, recertification and audit activities.
• Maintain evidence of effectiveness of identity controls.
• Monitor privileged access and elevated-access workflows.
• Investigate access-related issues and escalate risks.
• Work with Engineering, Architecture and Infrastructure to embed identity security in designs.
• Provide input into architecture decisions and identity patterns.
• Ensure scalability of identity controls as the tech environment grows.
• Produce IAM documentation, standards and guidance.

Skills

IAM design

PAM knowledge

RBAC

Identity governance

Cloud identity

Azure AD

AD DS

Stakeholder management

Security architecture

Education

Degree in IT/Cybersecurity

Certification in Identity or Security

Tools

Microsoft Entra ID

Azure AD

Job description

AGS in Warwickshire seeks a Senior Identity & Access Management Specialist to lead design, governance, and lifecycle management of IAM across a large, complex enterprise.

You will assess the current IAM landscape, define a target state, and deliver secure identity solutions across on‑premises, cloud and SaaS environments, collaborating with Engineering, Architecture and Security teams to balance security with user experience.