Senior Identity & Access Engineer
- Permanent
About the Role
This is an opportunity for an experienced Identity and Access Management (IDAM) specialist to take a technical lead on workstreams that matter. You'll translate business and technical requirements into secure, scalable designs; guide the delivery of identity-related work packages within strategic projects; and continually improve the services that enable staff and students to work, learn and collaborate.
You'll work across identity provider and Identity Governance and Administration (IGA) services, helping strengthen security, resilience and the user lifecycle experience. From developing technical standards and role-based access models to testing integrations, monitoring services and managing risks, you'll combine hands-on engineering with collaborative technical leadership.
Key Responsibilities
- Lead IDAM design activities and technical work packages for strategic projects and continuous improvement initiatives, taking ownership of plans, deliverables, quality and timescales.
- Develop secure, scalable technical designs that translate University requirements into effective identity solutions and align with enterprise and solution architectures.
- Contribute to identity provider and Identity Governance and Administration (IGA) services, strengthening the security and resilience of University systems.
- Develop and promote technical patterns, standards and guidance, including Role-Based Access Control (RBAC) policies, models and guidelines aligned with University needs and security best practice.
- Review and improve identity and user lifecycle management processes to support a secure, consistent and positive user experience.
- Plan and execute end-to-end test plans and test cases to verify IDAM tools, systems and integrations; maintain clear, appropriate technical documentation.
- Proactively monitor identity infrastructure, maintain service documentation and identify issues before they affect students or staff.
- Build effective relationships with stakeholders and application owners, clarify requirements, manage expectations and communicate progress, risks and issues in a timely way.
- Support service enhancement and ITIL-aligned Incident, Problem and Change Management, working with the Service Management Office to improve service delivery and process integration.
- Horizon-scan identity and security trends, assess emerging technologies and make informed recommendations to senior colleagues.
Key Skills & Experiences
We're looking for someone who can combine deep technical knowledge with the confidence to lead complex workstreams and bring stakeholders with them.
- Extensive knowledge and practical experience of IDAM tools and principles, such as single sign-on (SSO), federation, multi-factor authentication (MFA), OpenLDAP, Shibboleth, Active Directory, identity lifecycle management, authentication and authorisation, RBAC, privileged access management (PAM), risk-based authentication and access reviews.
- Experience providing technical direction on strategic, large or complex security and/or identity and access management projects.
- A track record of leading technical design activities and taking responsibility for IDAM solutions that are compatible with enterprise and solution architectures.
- Ability to work with technical and non-technical stakeholders to understand requirements, manage expectations and keep people informed of progress.
- Strong identity and security fundamentals, with a structured approach to design, documentation, testing, risk management and continuous improvement.
- Experience working in a structured IT service management environment, including incident, change and problem management.
- Ability to select and apply appropriate design methods and tools, using plan-driven or iterative/agile approaches as appropriate.
- A customer-focused approach, strong interpersonal skills and the ability to establish productive relationships across diverse teams.
To learn more about this exciting opportunity and benefits we offer, please read the JD and Candidate Pack provided below.
Application & Assessment