Senior Identity & Access Management Engineer

Proactive Appointments; City Of London; Hybrid; GBP 110,000; Full time

Job summary

A leading financial services firm is seeking a Senior Identity & Access Management Engineer to shape and manage their identity environment. The ideal candidate will have over 10 years of experience in IAM, deep expertise in Active Directory, and strong skills in automation and compliance. This strategic role offers an opportunity to influence the organization's security posture while working in a hybrid environment.

Benefits

27 days holiday plus bank holidays

10% employer pension contribution

Life assurance (4x salary)

Private medical insurance (BUPA)

Subsidised gym membership

Qualifications

• 10+ years' experience in enterprise-scale IAM and directory services engineering.
• Strong knowledge of PKI, certificates, and compliance requirements.
• Experience with IAM governance tools is essential.

Responsibilities

• Lead the design and management of hybrid identity infrastructure.
• Drive improvements in authentication and access governance.
• Provide mentorship to junior engineers and influence security direction.

Skills

Active Directory

Entra ID

DNS/DHCP/IPAM

IAM strategy

PowerShell scripting

Tools

SailPoint

Saviynt

Infoblox

Job description

Senior Identity & Access Management Engineer

London - Hybrid £110,000

We are working with one of our best financial services clients to hire a Senior Engineer - IT Security (Identity & Access Management / Directory Services). This is a senior technical role focused on shaping and managing the firm's hybrid identity environment, ensuring secure, efficient, and scalable access to critical enterprise systems.

If you're a specialist in Active Directory, Entra ID, DNS/DHCP/IPAM, and IAM strategy, this is an opportunity to lead impactful initiatives within a highly regulated, enterprise-scale financial services environment.

The Role

As Senior IAM Engineer, you will:

• Lead the design, implementation, and management of hybrid identity infrastructure (Active Directory, Entra ID, Infoblox)
• Drive improvements in authentication, access governance, automation, and compliance across a global organisation
• Act as a subject matter expert on IAM and directory services, mentoring junior engineers and influencing strategic security direction
• Deliver IAM-related projects, ensuring scalability, resilience, and regulatory compliance
• Support disaster recovery, on-call rotations, and enterprise-level troubleshooting in a complex hybrid environment

What We\'re Looking For

• 10+ years' experience in enterprise-scale IAM and directory services engineering
• Deep technical expertise in Active Directory, Entra ID, DNS/DHCP/IPAM (Infoblox experience highly desirable)
• Strong knowledge of PKI, certificates, authentication flows, access automation, and compliance requirements
• Advanced PowerShell scripting and automation skills
• Experience with IAM governance tools (SailPoint, Saviynt, or similar)
• Financial services background preferred, though enterprise-level IAM experience is essential

Why Apply?

This is a strategic IAM role where you\'ll have real influence on shaping the security posture of a leading financial services organisation, with opportunities to innovate and drive best practices in access management.

Benefits Summary

• 27 days holiday plus bank holidays
• 10% employer pension contribution (non-contributory)
• Life assurance (4x salary)
• Permanent health insurance (75% income protection for long-term illness)
• Private medical insurance (BUPA) - single cover included, with family options available
• Dental insurance (BUPA) optional
• Season ticket loan (interest free)
• Subsidised gym membership (50% contribution)
• Flexible benefits including additional holiday, life assurance, critical illness cover, and salary sacrifice schemes (Cycle to Work, childcare vouchers, mobile phone scheme)

Hybrid working from London office. Enterprise-scale IAM focus (not a generic IT security engineer role). High-impact role in financial services.

Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted.

Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation

We take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website