Senior IAM Engineer

NCC Group; Manchester; On-site; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Flexible Working

25 days holiday

Medicash & Critical Illness

Pension

Life Assurance

Share Save Scheme

Volunteering Programmes

Green Car Scheme

Cycle to Work

Special Time Off

Family Planning

Job summary

NCC Group is expanding its Global IAM team, seeking an experienced Senior IAM Engineer to design, develop and deploy large-scale IAM solutions. You will work on identity lifecycle, access governance and privileged access, collaborating with internal IAM SMEs and Cyber team members.

The role is client-facing, with emphasis on delivering high-quality secure solutions. The ideal candidate has hands-on IAM/PAM engineering experience across complex engagements, strong communication skills, and

Qualifications

• Experience delivering IAM and/or PAM engagements across stages from strategy to implementation.
• Experience with HR processes (JML) and integrations with systems like WorkDay, SuccessFactors, Beeline.
• Strong communication, consulting skills and ability to present to stakeholders.
• Experience with IAM/PAM in cloud environments and DevOps practices.

Responsibilities

• Act as trusted advisor delivering high-quality outcomes that meet client expectations.
• Review requirements and align with project timescales and product configuration.
• Develop integrations for IAM deployments incl. JML processes and config.
• Support IAM service deployments and identify optimisation opportunities.
• Operate in an agile delivery model.
• Unit test code and configurations; support peer QA and testing.
• Conduct post-implementation activities including user testing and troubleshooting.

Skills

IAM products

PAM products

IAM engagements

Communication skills

Client facing

DevOps exposure

Cloud platforms

Tools

GitHub

Active Directory

Microsoft Entra

SailPoint

Saviynt

Okta

CyberArk

Delinea

BeyondTrust

Job description

Senior IAM Engineer

Department: Cyber Services and Capabilities

Employment Type: Full Time

Location: GBR Manchester Hardman Boulevard

Description

NCC Group are investing in expanding our digital identity service line, to grow and expand capabilities, offerings and propositions.

This new global practice will focus on three key core competencies - Identity, Governance and Administration (IGA), Privileged Access Management (PAM), Access Management (AM) and Customer Identity (CIAM).

The opportunity is for an IAM technical consultant with hands‑on technical experience, performing as an engineer/developer to support large‑scale IAM deployments, supporting the implementation of identity lifecycle management, access governance and/or privileged access. The role will be client‑facing role, working with other internal IAM SMEs and Cyber team members to support the deployment activities for large enterprise IAM solutions. The consultant will report to the service line leader.

This is a fantastic new opportunity to join our Global IAM team. The ideal candidate will have previous IAM/PAM engineering and development experience, and exposure gained from delivering complex IAM engagements, ideally across a broad client base. In addition to your technical skills, you will have strong client facing skills and be comfortable dealing with technical client stakeholders.

Key Responsibilities

• Act as a trusted advisor through high-quality delivery, ensuring outcomes exceed client expectations.
• Review requirements aligned with project timescales and product configuration capabilities, to ensure best practice is applied in all stages of the design and development.
• Perform development activities to support the integration with target applications, covering full lifecycle activities with implementation of key JML processes and integration configuration.
• Support colleagues and client stakeholders to support the implementation of IAM services, including the identification of optimisation opportunities.
• Ability to operate in an agile delivery model.
• Responsible for unit testing of code and configuration. Ability to support peer QA and testing.
• Perform post-implementation activities, such as user testing, troubleshooting and support

Skills, Knowledge & Expertise

Minimum Required Skills Have experience of

• IAM products such as SailPoint, Saviynt, Okta, Microsoft and others;

and/or

• PAM products such as CyberArk, Delinea, BeyondTrust, Wallex and others.

• Have experience of delivering complex IAM and/or PAM engagements and projects, ideally covering all stages including strategy, design and implementation.
• Have experience of developing and delivery of IAM/PAM projects on time and on budget, to a high level of customer satisfaction.
• Have strong business, consultancy and technical skills.
• Excellent communication, consulting soft skills and presentation skills.
• Exceptional written communication and reporting skills.
• Experience with Active Directory, Microsoft Entra and other cloud platforms.
• Experience with DevOps processes and tools, including exposure with Source Code Management (GitHub)

IAM

• Have experience with HR processes (JML) and systems and authoritative source integration based on WorkDay, SuccessFactors, Beeline, and application integration such as AD, ServiceNow, SAP, etc.
• Have experience with Java, BeanShell/JavaScript, JSP/Servlets
• Have experience with web technologies: XML, SPML/SOAP. Web Services and App Services
• Hands on experience of SailPoint, Saviynt, Okta, Microsoft or other IAM products
• Knowledge of RBAC, SOD, etc.

PAM

• Have experience of defining privileged access and the supporting the implementation of effective PAM processes
• Have experience of account discovery, classification and onboarding of privileged accounts and access
• Implementation and integration experience, working with other technical teams to perform the necessary configuration (firewall rules) and onboarding readiness activities
• Hands on experience of CyberArk, BeyondTrust, Delina, Microsoft or other PAM products

Desired Skills and Qualifications

• Demonstrable capability and vendor qualifications is advantageous.
• IAM and/or PAM vendor Certifications
• Zero trust and SASE knowledge
• Cloud related certifications across AWS/GCP/Azure
• Cloud IAM native experience across AWS/GCP/Azure
• CISM / CISSP / CRISC / ISO 27001 LI/LA / CISA
• Experience of core control frameworks, such as, NIST, SANS Top 20 CSC, ISO 27001, Privacy, NIS and CAF.

Behaviours

• Flexibility in working hours (as per client requirement).
• Ability to travel both nationwide and internationally (where required).
• Ability to build strong, trust-based working relationships
• High standards of work output
• Strong and effective communicator
• Desire to continually improve and learn new skills.
• Self-motivating, innovative and creative

Job Benefits

• Flexible Working: Balance your work and personal life with our flexible working options.
• Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave.
• Medicash & Critical Illness Scheme
• Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme.
• Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities.
• Green Car Scheme: Drive green and save money with our eco-friendly car scheme.
• Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme.
• Special Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet.
• Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments.