IAM Engineer
9 Month Contract - likely to extend
Hybrid - once a week in the office
Inside IR35
Our leading Retail client is looking an IAM Engineer to support a major Identity Programme within their Technology Governance & Controls function. This is a hands‑on, technically rich role covering discovery, integration, automation, and security hardening across our identity landscape.
You’ll work closely with Delivery Leads, Analysts, Architects, Security, and Platform teams to design, implement, and validate identity solutions that strengthen our technology estate and support long‑term strategic change.
What You'll Be Doing
Identity Engineering & Technical Delivery:
* Conduct technical discovery and current‑state analysis across identity systems.
* Validate and execute Proof‑of‑Concepts (POCs) and carry out technical reviews and security hardening assessments.
* Configure, integrate, and validate Cloud IDaaS platforms.
* Lead application onboarding and identity integration across SAML, OIDC, OAuth2 and SCIM.
* Produce high‑quality LLDs, runbooks, implementation guides, and integration documentation.
* Automate and optimise JML processes across directories and applications.
* Provide Level 3 engineering support as the identity SME for technical escalations.
Team Collaboration:
You’ll be part of a small, focused group operating under Tech RMC, collaborating with a wider team of around 20 practitioners including Delivery Leads, coordinators, and analysts. Expect a supportive, delivery‑driven environment with scope to influence technical direction and integration standards.
Experience Required
Technical Depth:
* Translate business requirements into end‑to‑end technical solutions, from use case to configuration.
* Create clear, high‑quality Low‑Level Designs, runbooks, implementation guides and configuration documents.
* Configure and validate Cloud IDaaS platforms and identity integrations in hands‑on engineering environments.
* Lead applicationonboarding and integration using:
* SAML / OIDC / OAuth2 / SCIM
* Attribute & claim mapping
* Certificate and key lifecycle management
* Design and automate Joiner / Mover / Leaver (JML) processes across directories and applications.
* Manage the lifecycle and governance of human and non‑human identities (service accounts, API identities).
Communication & Stakeholder Skills:
* Explain complex technical concepts clearly to non‑technical stakeholders (e.g., business owners, leadership).
* Engage in technical detail with Architects, Security, DevOps, Platform Engineers and Application Owners.
* Facilitate workshops, gather requirements, challenge assumptions constructively, and drive alignment across diverse teams.
To apply for this position please submit your CV.