Security Engineer – Identity and Access Management, IAM

• Operate and maintain IAM services, including user lifecycle management, access requests, provisioning, deprovisioning and access changes across Microsoft Entra ID and integrated applications
• Manage identity governance and access controls, including RBAC, least-privilege access, Conditional Access and PIM
• Manage access reviews and certifications, including reviewer engagement, evidence collection, exception handling, remediation tracking and reporting
• Onboard and integrate applications into IAM/IGA, including SSO, SAML/OIDC, SCIM provisioning and secure authentication using Microsoft Entra ID
• Support application and vendor onboarding from an IAM perspective
• Maintain IAM controls and audit evidence for internal and external audits and regulatory requirements
• Deliver improvements through automation, improved workflows, better request processes, clearer ownership and enhanced reporting
• Support identity-related issues and investigations with application owners, Technology, Security and other stakeholders
• Maintain IAM documentation and operational standards, including process guides, access models, onboarding standards, control evidence and runbooks
• Support Azure identity, access management and security controls, credential lifecycle management, and Google Cloud IAM governance, engineering and automation
• Report IAM risks, control status, work in progress, blockers and remediation actions to Security leadership
• Support related control and regulatory activities, including Risk Smart Indicators and Data Subject Access Requests

Requirements

• Experience in Identity and Access Management, Security Operations, Cloud Security or technical operations, ideally within a regulated or control-focused environment
• Good hands‑on knowledge of Microsoft Entra ID and Azure identity, access management and security controls, including users, groups, Enterprise Applications, SSO, Conditional Access, Privileged Identity Management and access management controls
• Understanding of IAM principles and controls, including least privilege, RBAC, privileged access, joiner/mover/leaver processes and segregation of duties
• Experience supporting access reviews, remediation, audit evidence and operational controls
• Experience balancing BAU operational work with hands‑on engineering, including improving processes, writing or adapting scripts, documenting workflows and automating repeatable tasks
• Experience with Microsoft Entra Identity Governance, Conditional Access, PIM, access reviews and Enterprise Applications
• Experience with Microsoft Graph, PowerShell, Logic Apps, Azure Functions or similar automation tooling
• Experience with Azure identity, access management and security controls
• Experience with SAML, SCIM, OAuth, OpenID Connect, SSO onboarding and secure provisioning patterns
• Experience with Google Cloud Platform IAM governance, access models, engineering standards and automation
• Experience with 1Password or similar credential management platforms
• Experience with cloud audit logging and identity monitoring
• Experience with service desk and IT workflow platforms
• Able to work with application owners, Technology, Security, suppliers and non‑technical stakeholders
• Strong analytical and problem‑solving skills
• Clear written and verbal communication skills in plain English
• Understands effective, auditable controls in an FCA/PRA‑regulated environment

Core Competencies

Demonstrates expertise in Identity and Access Management (IAM) with a focus on Microsoft Entra ID, Azure identity controls, and automation of IAM processes. Proficient in managing access governance, conducting access reviews, and ensuring compliance with regulatory standards.

Highest‑signal resume keywords

• Identity And Access Management
• Microsoft Entra ID
• Azure Identity Management
• Access Reviews
• Automation Tools

Hard Skills

• User Lifecycle Management
• Role‑Based Access Control
• Privileged Identity Management
• SAML
• SCIM
• OAuth
• OpenID Connect
• Microsoft Graph
• PowerShell
• Cloud Security

Soft Skills

• Analytical Skills
• Problem‑Solving Skills
• Clear Communication

Industry Keywords

• Regulated Environment
• Audit Evidence
• Access Controls
• Data Subject Access Requests
• FCA/PRA Compliance

Tools & Technologies

• Microsoft Entra Identity Governance
• Azure Functions
• Logic Apps
• 1Password
• Service Desk Platforms