Security Engineer – Identity and Access Management (IAM)

About This Opportunity

We are representing a fast-growing UK financial services organization seeking a Security Engineer specializing in Identity and Access Management. This is a hands-on role combining day-to-day IAM operations with engineering, automation, and continuous improvement initiatives. You'll work within a delivery-focused security team that partners closely with technology, engineering, and business stakeholders to maintain strong, proportionate security controls in a regulated banking environment.

The position is based in Milton Keynes and focuses on strengthening identity and access controls by making access easier to request, safer to approve, and simpler to evidence. You'll reduce manual effort and improve security governance of identity services across the organization.

Responsibilities

• Operate and maintain IAM services including user lifecycle management, access requests, provisioning, deprovisioning and access changes across Microsoft Entra ID and integrated applications
• Manage identity governance and access controls, including RBAC, least-privilege access, Conditional Access and Privileged Identity Management (PIM)
• Manage access reviews and certifications, including reviewer engagement, evidence collection, exception handling, remediation tracking and reporting
• Onboard and integrate applications into the IAM/IGA platform, including SSO, SAML/OIDC, SCIM provisioning and secure authentication
• Support application and vendor onboarding from an IAM perspective, assessing authentication, provisioning, privileged access, logging, ownership and access review requirements
• Maintain effective IAM controls and audit evidence, supporting internal and external audits and regulatory requirements
• Identify and deliver improvements through automation, improved workflows, better request processes, clearer ownership and enhanced reporting
• Support identity-related issues and investigations, working with application owners, technology teams, security colleagues and other stakeholders
• Maintain IAM documentation and operational standards, including process guides, access models, onboarding standards, control evidence and runbooks
• Support wider identity and cloud access services including Azure identity, access management and security controls, and Google Cloud IAM governance and automation
• Provide clear reporting to security leadership, highlighting IAM risks, control status, work in progress, blockers and remediation actions

What We're Looking For

Essential Skills and Experience:

• Experience in Identity and Access Management, Security Operations, Cloud Security or technical operations, ideally within a regulated or control-focused environment
• Strong hands-on knowledge of Microsoft Entra ID and Azure identity, access management and security controls, including users, groups, Enterprise Applications, SSO, Conditional Access, Privileged Identity Management and access management controls
• Understanding of IAM principles and controls, including least privilege, RBAC, privileged access, joiner/mover/leaver processes and segregation of duties
• Experience supporting access reviews, remediation, audit evidence and operational controls, with strong attention to detail and follow-through
• Ability to balance BAU operational work with hands-on engineering, including improving processes, writing or adapting scripts, documenting workflows and automating repeatable tasks
• Strong analytical and problem-solving skills, with the ability to investigate access issues, identify root causes and recommend practical improvements
• Clear written and verbal communication skills, with the ability to explain identity risks, controls and needed actions in plain language
• Strong ownership and accountability, particularly regarding access approvals, evidence, remediation and control outcomes
• Understanding of the importance of effective, auditable controls in an FCA/PRA-regulated environment
• Ability to consider end-user experience when designing and improving access processes, balancing security, usability and operational efficiency

Desirable Technical Knowledge:

• Microsoft Entra Identity Governance, Conditional Access, PIM, access reviews and Enterprise Applications
• Automation and scripting using Microsoft Graph, PowerShell, Logic Apps, Azure Functions or similar tools
• Azure identity, access management and security controls
• Application integration protocols: SAML, SCIM, OAuth, OpenID Connect, SSO onboarding and secure provisioning patterns
• Google Cloud Platform IAM governance, access models, engineering standards and automation
• Credential management platforms
• Cloud audit logging and identity monitoring
• Service desk and IT workflow platforms
• Experience using automation and AI tools to improve processes, reduce manual effort and strengthen security controls

You don't need experience across every technology listed. Curiosity, the ability to learn quickly, and a strong understanding of IAM principles are more important than knowledge of specific products.

How We Work with You

When you apply through Get A Job.ai, our talent team will review your profile and conduct an initial screening conversation to understand your background and career goals. If there's a strong mutual fit, we'll submit your candidacy to our client for consideration. Please do not contact the client organization directly, as all communication and coordination will be managed through our recruiting team to ensure the best possible candidate experience.

Pay

Compensation details will be discussed during the screening process with our recruiting team.

Equal Employment Opportunity: Get A Job.ai is committed to creating an inclusive recruitment process. We welcome applications from candidates of all backgrounds and experiences.