Senior Identity & Access Engineer — Zero Trust IAM Leader

CloudPay; United Kingdom; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

WFH Allowance

Private Medical Insurance

Pension Scheme

Cycle to Work Scheme

Life Assurance

EAP

Job summary

CloudPay is seeking a Senior Identity & Access Management Engineer to lead, design, and evolve our IAM platform across the global environment. You will own authentication, federation, and governance workflows, delivering secure, scalable identity services and automation to support a Zero Trust architecture.

In this role you will work with ForgeRock, Ping Identity technologies, implement IAC-based deployments, and partner with Security and Platform teams to drive continuous improvements and

Qualifications

• Enterprise IAM experience required.
• Proficiency with SAML, OAuth2, OIDC, SCIM.
• Experience with ForgeRock or Ping Identity.
• Knowledge of RBAC, identity governance, and Zero Trust.
• Experience with IaC tools like Terraform, Python, PowerShell or Ansible.

Responsibilities

• Design, build, and optimise identity services using ForgeRock/PingOne.
• Create seamless authentication, registration, federation, and self-service experiences.
• Develop secure integrations using SAML, OAuth2, OIDC, and SCIM.
• Build automation and CI/CD pipelines for IAM deployments.
• Implement identity governance, provisioning, and RBAC for Zero Trust.
• Improve observability, resilience, and security monitoring.
• Troubleshoot complex authentication and integration issues.
• Collaborate with Security, Platform Engineering, Product, and IT teams.
• Mentor engineers and promote engineering best practices.

Skills

Enterprise IAM experience

SAML / OAuth2 / OIDC

RBAC & Zero Trust

Scripting / IaC

Troubleshooting

Collaboration

Education

Bachelor's degree in CS/IT or equivalent

Tools

ForgeRock

Ping Identity

Terraform

PowerShell

Ansible

Docker

Kubernetes

Job description

CloudPay is seeking a Senior Identity & Access Management Engineer to lead, design, and evolve our IAM platform across the global environment. You will own authentication, federation, and governance workflows, delivering secure, scalable identity services and automation to support a Zero Trust architecture.

In this role you will work with ForgeRock, Ping Identity technologies, implement IAC-based deployments, and partner with Security and Platform teams to drive continuous improvements and