In this role, you will help ensure that Heathrow’s Identity & Access Management approach is securely designed, effectively managed, and aligned with the highest cyber security principles. You’ll bring a strong understanding of identity governance, user access lifecycle management, directory services, and privileged access management, ensuring our systems meet both industry standards and regulatory requirements.
1. Identity Lifecycle Management – Reviewing and automating joiner-mover-leaver (JML) processes, enforcing RBAC, and integrating identities with cloud and third-party services.
2. Authentication Controls – Verifying SSO, directory-services, and MFA configurations across all internal and external applications.
3. Secure Auth Design & Troubleshooting – Advising on secure authentication flows and investigating authentication failures or access anomalies.
4. Access Governance Oversight – Running periodic access reviews, analysing entitlements for toxic combinations, and ensuring least-privilege and segregation-of-duties.
5. Access Policy & Reporting – Maintaining access policies, approval workflows, and supplying timely logs and evidence for audits and regulatory reporting.
6. PAM Platform Configuration – Aligning the privileged-access-management platform with industry best practice and integrating it with wider security tooling.
7. Privileged Access Assurance & Incident Support – Reviewing privileged assignments, monitoring privileged activity, and supporting cyber-incident investigations.
8. Identity Analytics & Monitoring – Leveraging SIEM, building playbooks, dashboards, and KPIs to detect anomalous identity behaviour and drive continuous improvement.
9. Threat-Hunting & CDC Support – Using identity data for threat hunting and assisting the Cyber Defence Centre in triaging identity-related incidents.
10. Documentation, Collaboration & Continuous Improvement – Maintaining IDAM standards, contributing to projects and upgrades, staying current with trends, and participating in audits and risk assessments.
11. Strong experience specialising in identity and access management, including hands-on experience with identity platforms (Azure AD, Entra, Defender for Identity, BeyondTrust).
12. Strong understanding of identity lifecycle, RBAC, and access control models.
13. Familiarity with cloud environments from an IDAM perspective.
14. Experience in ensuring compliance with industry standards and regulations related to identity security (., NIST, ISO 27001, PCI-DSS, GDPR).
15. Strong knowledge of identity governance, authentication protocols (SAML, OAuth, OpenID Connect), and directory services (AD, Azure AD).
16. Hands-on experience with identity-related security audits, access reviews, and compliance requirements.
17. Proven ability to analyse and interpret access data, logs, and entitlements to identify security risks.
18. Understanding of Zero Trust architecture and principles as applied to IDAM.
19. Familiarity with identity analytics tools and SIEM solutions for correlating IDAM events (., Sentinel).
Ideally, you’ll have:
20. Experience participating in internal and external audits, including evidence gathering and control walkthroughs.
21. Experience of working with PAM technologies (. BeyondTrust)
22. Experience working with ITSM platforms like ServiceNow to manage access workflows and incidents.
23. Understanding of the security challenges within regulated industries.