Senior Identity Management Engineer

Infrastructure as Code: Build and manage identity infrastructure using Terraform or Ansible, ensuring all configurations are automated and version-controlled.

Technical Leadership & Mentorship

Standard Setting: Define the technical standards for the identity team by producing high-quality code, rigorous documentation, and robust architectural patterns.

Advanced Troubleshooting : Act as the primary escalation point for the most complex technical failures, performing deep-dive analysis of protocol exchanges (SAML, OIDC, OAuth2).

Mentorship: Provide structured technical guidance to junior and mid-level engineers, upskilling the team through peer reviews and collaborative problem-solving.

• Stakeholder engagement : Excellent collaboration and communication skills. Ability to influence stakeholders across multiple teams and levels.

Experience needed for this role:

Experience: Solid hands-on engineering experience in IAM

PingIdentity Mastery: Extensive hands-on experience deploying and managing PingFederate (SAML/OAuth/OIDC configurations), PingDirectory, and PingAccess (WAM/API security).

Identity Modernisation: A proven track record of executing the migration of legacy identity systems to modern, claims-based architectures.

Tooling & Governance: Direct experience configuring and integrating IGA tools (e.g. SailPoint, Saviynt) and PAM/PIM solutions to enforce the principle of least privilege.

Protocol Expertise: Expert-level capability in debugging and configuring SAML , OIDC , OAuth2 , and SCIM workflows.

Core IAM Concepts: Strong understanding of RBAC, ABAC, Zero Trust architecture, and Directory Services (LDAP, Active Directory, Azure AD/Entra ID).

PAM/PIM Knowledge: Proven experience implementing or managing PAM solutions (e.g., vaulting, session recording, password rotation) and PIM principles (role elevation, time-bound access).

DevOps & Automation : Proficiency in scripting (Python, PowerShell, Bash) and Infrastructure as Code (Terraform, Ansible) to automate IAM deployments.

Core Competencies

Builder Mindset: A strong preference for hands-on creation and a drive to see technical projects through to completion.

Strategic Execution: The ability to understand the broader business objective and translate it into a functional, secure technical reality.

Preferred Qualifications:

• Certifications: Ping Identity Certified Professional (PingFederate/PingAccess), CISSP, CISM, or vendor-specific PAM certifications (e.g., CyberArk Defender).

Certifications: Ping Identity Certified Professional (PingFederate/PingAccess), CISSP, CISM, or vendor-specific PAM certifications (e.g., CyberArk Defender).

Cloud Identity: Extensive experience with cloud identity providers (Azure AD/Entra ID) and securing workloads in AWS, Azure, or GCP.

About you and Our core values

Taking ownership, working with integrity and respect

Being a team player is key to our culture

Solution and customer focused

Great initiative with the goal for excellence in achieving results

Dedicated to developing and always looking for continuous improvements

United Kingdom Package and benefits

• Competitive Salary

Competitive Salary

• Competitive vacation allowance

Competitive vacation allowance

Calm app

WFH Allowance

Life Assurance

Private Medical Insurance

Cycle to Work Scheme

EAP

Eye Tests & Glasses Contribution

Simplyhealth Enhanced Health Plan

Pension Scheme

Give-As-You-Earn (GAYE)

Employee Referral Program

CloudPay NOW

Paid Volunteering days

Marriage Leave

Bereavement Leave