Job Description
Senior IAM Operations Engineer – Contract (Outside IR35)
London (Hybrid) | Global IAM Team
£600–£700 per day | Initial 6–12 months
We are looking for a Senior Identity & Access Management (IAM) Operations Engineer to join a global IAM function on a day-rate contract basis. This is a hands-on engineering role (not an analyst position) requiring deep, practical experience across the IAM stack.
You’ll work closely with senior IAM leadership based in the US while supporting a globally distributed enterprise environment.
The role
* Act as a senior, hands-on IAM engineer across enterprise IAM platforms
* Build, configure, enhance, and support IAM services (~80% engineering / 20% architecture & strategy)
* Deliver and support SSO, MFA, Privileged Access Management, and Directory Services
* Own day-to-day IAM operations and fulfilment activities
* Provide IAM expertise and guidance to project and delivery teams
* Hands-on configuration and operation of CyberArk (privileged accounts, vaulting, session management)
* Configure and support Microsoft Entra ID (Azure AD) including cloud-based groups and access policies
* Integrate and support SSO applications (SAML, OIDC, OAuth) using platforms such as Entra ID and Okta
* Support IAM governance activities including audits, certifications, and operational reporting
* Automate IAM processes using PowerShell (Python desirable)
* Work closely with global teams to deliver secure, resilient IAM services
Essential experience
* 8–10+ years’ experience in a hands-on IAM engineering role
* Broad IAM experience — not a single-tool specialist
* Strong, practical experience across:
* Microsoft Entra ID (Azure AD)
* Active Directory
* SSO & MFA platforms
* Privileged Access Management (CyberArk or similar)
* Solid understanding of IAM governance and how IAM technologies fit into the wider security ecosystem
* Daily, hands-on PowerShell scripting experience (Python a bonus)
* Strong security fundamentals: Least Privilege, Zero Trust, phishing-resistant authentication
* Proven “keyboard-level” delivery — you’ve personally built, configured, and supported IAM platforms
Contract details
* £600–£700 per day
* Outside IR35
* Initial 6–12 month contract with potential extension
* Hybrid working (London-based role with global collaboration)