Senior Identity Engineer

About the role

We are looking for a Senior Identity Engineer to design, administer, support and continuously improve enterprise Identity and Access Management (IAM) services across cloud and on‑premises environments. This hands‑on role operates in a highly regulated financial‑services setting where security, compliance and operational resilience are paramount.

Key responsibilities

• Design, implement and maintain IAM solutions that meet security policies and regulatory requirements.
• Manage identity requests, incidents, and change requests, ensuring timely resolution.
• Integrate applications with Single Sign‑On (SSO) and manage service accounts, service principals and non‑human identities.
• Administer privileged identities, workload identities and enforce least‑privilege access controls.
• Collaborate with security, infrastructure, application, risk, audit and business teams on cross‑functional initiatives.
• Provide troubleshooting for authentication, authorisation, federation and directory services.

Required profile

• Significant experience in IAM or identity engineering within a large, complex enterprise.
• Background in banking, insurance, wealth management or another regulated financial‑services environment.
• Strong understanding of least‑privilege, segregation of duties, role‑based access and enterprise access‑control principles.
• Proven ability to produce clear technical documentation, implementation plans and audit evidence.
• Excellent written and verbal communication skills and the ability to manage competing priorities.

Required skills

• Microsoft Entra ID (Azure AD)
• Microsoft Active Directory and Group Policy
• Hybrid identity and directory synchronization
• Enterprise application and service‑principal administration
• Managed and workload identities
• Role‑Based Access Control (RBAC)
• Privileged Identity Management (PIM) and Privileged Access Management (PAM)
• Conditional Access and Multi‑Factor Authentication (MFA)
• Single Sign‑On (SSO) integrations