Senior Identity Management Engineer

CloudPay Inc.; Andover; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

CloudPay is seeking a Senior Identity Management Engineer to lead the design, implementation, and evolution of our IAM platform. You will work on ForgeRock and Ping Identity-based solutions, automate identity lifecycle management, and advance our Zero Trust security posture across global services.

You will own auth/services delivery, integrate with SAML/OAuth2/OIDC/SCIM, and help scale secure access for diverse regions including the UK and Spain in a hybrid, global setup.

Qualifications

• Experience delivering enterprise IAM solutions.
• Proficiency with SAML, OAuth2, OIDC, SCIM.
• Hands-on with ForgeRock or Ping Identity.
• Scripting and IaC using Terraform, Python, PowerShell, or Ansible.
• Knowledge of RBAC and Zero Trust principles.

Responsibilities

• Design, build, and optimise IAM services.
• Automate deployments and CI/CD for IAM.
• Implement identity governance and access controls.
• Collaborate with Security, Platform Engineering, Product, and IT teams.
• Mentor engineers and promote best practices.

Skills

IAM solutions

SAML

OAuth2

OIDC

SCIM

ForgeRock

Ping Identity

Terraform

Python

PowerShell

Ansible

RBAC

Zero Trust

CI/CD

Troubleshooting

Collaboration

Tools

ForgeRock

Ping Identity

Terraform

Python

PowerShell

Ansible

Job description

## Senior Identity Management EngineerApply: Hybrid: Andover, United Kingdom: Remote, Spain: Remote, UK: Full time: Posted Today: JR1001116**About this job opportunity****Our Vision**To be the world's most trusted global payroll partner, simplifying pay for all employees.**Our Mission**Empowering global workforces with seamless, compliant, and innovative payroll and payment solutions, enabling businesses to thrive in a connected world.**Our People**Our fundamental beliefs at CloudPay are built on core values of professionalism, passion, empowerment, innovation, and teamwork. We value our employees and strive to create a great workplace where everyone is valued, heard, inspired, and encouraged to bring their authentic selves to work. We're committed to providing an excellent employee experience through fulfilling projects, empowerment to make a difference, and an environment that inspires innovation.## **What makes this role exciting - Shape the Future of Identity**## We're looking for Senior Identity & Access Management Engineers to help lead our identity modernisation journey and accelerate our transition to a Zero Trust security model.## This is a highly hands-on role where you'll own the design, implementation, and evolution of our identity platform, built on ForgeRock Identity and Access Management (PingOne Advanced Identity Cloud). You'll work at the heart of a strategic transformation, automating identity lifecycle management, modernising access controls, and delivering secure, scalable identity services across our global platform.## If you enjoy solving complex security challenges, building enterprise-scale IAM solutions, and making a visible impact on business outcomes, we'd love to hear from you.## **Main responsibilities:*** ## Design, build, and optimise identity services using ForgeRock/PingOne Advanced Identity Cloud.* ## Create seamless authentication, registration, federation, and self-service user experiences.* ## Develop secure integrations using SAML, OAuth2, OIDC, and SCIM.* ## Build automation and CI/CD pipelines to accelerate and standardise IAM deployments.* ## Implement identity governance, provisioning, and role-based access controls to support a Zero Trust architecture.* ## Improve platform observability, operational resilience, and security monitoring.* ## Troubleshoot complex authentication and access management challenges.* ## Collaborate closely with Security, Platform Engineering, Product, and Corporate IT teams.* ## Mentor engineers and champion engineering best practices across the team.## ## **Experience needed for this role:*** ## Strong hands-on experience delivering enterprise IAM solutions.* ## Expertise in identity protocols including SAML, OAuth2, OIDC, and SCIM.* ## Experience with ForgeRock, Ping Identity technologies, or similar enterprise IAM platforms.* ## Knowledge of RBAC, identity governance, lifecycle management, and Zero Trust principles.* ## Experience automating infrastructure and deployments using scripting and Infrastructure as Code tools such as Terraform, Python, PowerShell, or Ansible.* ## Strong troubleshooting and problem-solving skills with the ability to diagnose complex authentication and integration issues.* ## A collaborative mindset and passion for building secure, scalable solutions.## **Nice to Have*** ## Experience with IGA platforms such as SailPoint or Saviynt.* ## Exposure to PAM/PIM solutions such as CyberArk.* ## Cloud identity experience with Microsoft Entra ID, AWS, Azure, or GCP.* ## Docker and Kubernetes experience.* ## Relevant certifications (Ping Identity, CISSP, CISM, CyberArk, Microsoft).## **About you and Our core values*** ## Taking ownership, working with integrity and respect* ## Being a team player is key to our culture* ## Solution and customer focused* ## Great initiative with the goal for excellence in achieving results* ## Dedicated to developing and always looking for continuous improvements* ## Be creative, be committed, be engaged and enjoy what you do## **Local Package and Benefits to apply for United Kingdom and Spain**## **CloudPay is committed to being an equal opportunities employer.** #LI-AC1 #LI-HYBRID #LI-REMOTE