11 jobs found

Principal Identity & Access Lead London or Milton Keynes (2 days on site) 75 - 85k + 15% bonus We are working with an established organisation who are embarking on a significant digital transformation programme and are seeking a Principal Identity & Access Lead to shape and deliver their enterprise Identity and Access Management (IAM) strategy. The role will play a pivotal role in protecting critical systems, data, and business services by leading the evolution of the organisation's IAM capability. Working closely with the CISO and senior stakeholders, you will design, implement, and continuously enhance IAM and Privileged Access Management (PAM) solutions that strengthen resilience, support regulatory compliance, and enable secure business transformation. Key responsibilities include: Own and drive the enterprise IAM vision, roadmap and strategy, ensuring identity security capabilities support organisational goals and regulatory expectations Lead the selection, deployment, integration and ongoing optimisation of IAM and PAM solutions Champion identity governance and access management best practices across the organisation, influencing stakeholders at all levels Lead the design and operation of robust IAM and PAM controls that protect critical systems, data and business services Drive a culture of least privilege, accountability and access governance through effective control frameworks and stakeholder engagement Deliver insightful reporting and executive-level briefings on IAM risk, compliance, maturity and control effectiveness Lead a team of IAM Analysts Experience with IAM and PAM tools such as SailPoint, CyberArk, Delinea or similar is essential. If you're passionate about building secure, scalable identity services and enjoy working across technology, architecture and business teams, please apply now.

Identity Access Management (IAM) roles London / Manchester / Leeds / Edinburgh Hybrid - 2/3 days per week in office 55,000 - 115,000 + benefits Consultant Senior Consultant Manager Senior Manager Architect Associate Director Hays Technology are working with a global business consultancy organisation who are looking for a variety of Identity and Access Management professionals. The team you'll be working within are responsible for providing Identity and Access Management services to a wide range of clients. You'll be working on projects to provide IAM solutions to clients, running IAM diagnostics, assisting with strategy definition and minimising IAM risk for clients. These are roles that will require a good degree of technical knowledge spanning one or multiple of the IAM solutions listed further below. The roles will also require excellent communication skills alongside stakeholder engagement and management ability for the consulting side of the positions. Throughout your career with this organisation you may choose to stick more to the technical side of things, or may be more interested in the business consultancy side of things. This is a role that will allow you to grow with the business and my client will play to your strengths. The ideal candidate to start this role, however, will have a mixture of consulting experience and IAM technical expertise. The roles are hybrid and will be based in London / Manchester / Leeds / Edinburgh What you'll be doing (dependent on role seniority) Consulting with clients across a variety of sectors on IAM solutions Supporting on complex client engagements Running IAM diagnostics Assisting with application onboarding Preparing solutions to be released to clients Supporting and providing specialised input into IAM implementations of various scales IAM requirements gathering Providing outbound specialised expertise on IAM tools and their integration with client systems Gaining an understanding of clients' businesses, offering suggestions, providing IAM support Communicating effectively with technical and non-technical stakeholders Acting as an SME on IAM controls needed by clients What we're looking for: IAM expertise: understanding of technical controls and contemporary IAM risks Experience utilising/implementing one or more of the following, the more the better: Okta, Entra ID, BeyondTrust, Oneidentity, CyberArk, Sailpoint, Saviynt. Eligibility for SC clearance Experience consulting within the IAM space Demonstrable internal and external stakeholder engagement and management ability Good time management A resilient personality able to deal with a fast-paced environment What you'll get in return In addition to a salary of between 55,000 to 115,000, you'll also receive a variety of benefits, such as: Annual bonus - % dependent on role seniority Car/cash allowance - dependent on role seniority Progression plans and growth opportunities within National and Global teams Good holidays and pension What you need to do now If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now. If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career. Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at (url removed)

Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do The Principal IAM Engineer is the senior technical authority for identity services, responsible for designing, implementing, and governing enterprise-wide IAM capabilities across workforce, partner, and customer identities. This role combines deep hands-on engineering with architecture and leadership, driving the modernization of authentication, authorization, identity lifecycle, and privileged access controls across our cloud and on-prem environments. Responsibilities: Own the end to end technical delivery of IAM services, including identity lifecycle management, authentication, authorization, SSO, and privileged access controls, ensuring they are secure, scalable, and highly available. Lead design sessions, collaborating with Entrprise Architecture, and implementation of IAM integrations for SaaS, on prem, and AWS cloud platforms, including federation (SAML, OIDC, OAuth), MFA, and Passwordless capabilities. Serve as the primary escalation point for complex IAM engineering issues; perform root cause analysis and drive long term remediation and hardening of IAM platforms and related services. Partner with security architecture, infrastructure, application, and HR/IT teams to align IAM solutions with enterprise security strategy, compliance obligations, and business objectives. Define IAM engineering standards, patterns, and reference architectures; guide other engineers in implementing secure onboarding patterns for applications into IGA, PAM, and SSO platforms. Lead modernization initiatives. Contribute to audits, risk assessments, and regulatory reviews by providing technical evidence, designing compensating controls, and closing identified IAM control gaps. Mentor and coach IAM engineers and analysts, promoting engineering excellence, documentation discipline, and a culture of continuous learning and improvement. What You'll Bring 10+ years of experience in information security or infrastructure engineering, with at least 5 years of hands-on-keyboard experience with core IAM platforms. Deep expertise with the majority of our IAM stack Strong hands-on experience with Microsoft Entra ID and Active Directory as foundational directory services, and extensive experience implementing federation protocols (SAML, OIDC, OAuth2). Proven track record designing and implementing IAM solutions in hybrid multi-cloud environments, including the automation of provisioning, access reviews, and RBAC/ABAC models. Experience with secrets management solutions. Proficiency in at least one scripting or programming language (such as PowerShell, Python, or Java) to automate tasks and build custom connectors for our IAM tools. Excellent communication skills with the ability to translate complex technical concepts related to our IAM ecosystem for both technical and non-technical stakeholders. Exceptional sense of ownership and the ability to work with a limited set of requirements. Highly advanced ability to breakdown work to deliver value incrementally. Experience leading large-scale IAM programs. Prior responsibility as a technical lead or architect for IAM, including mentoring teams and influencing roadmaps beyond direct reporting lines. Demonstrated ability to balance security, usability, and operational efficiency, with a strong bias toward automation and measurable risk reduction. Define and lead the implementation of the organization's security strategy, with a focus on Cloud Security, Identity Access Management, and all other aspects of Cybersecurity Oversee the deployment of IAM solutions across both on-premise and cloud environments, ensuring they meet the highest standards of security. Lead the most complex security assessments, including threat modeling, red teaming, and cloud security reviews. Collaborate with executive leadership to ensure that security initiatives align with the organization's strategic goals and risk appetite. Act as the technical lead for large-scale security projects, coordinating cross-functional teams to ensure successful delivery. Architect and implement solutions across workforce IAM, PAM, and customer IAM ecosystems. Provide thought leadership in adopting passwordless authentication, passkeys, adaptive MFA, and AI-driven access orchestration strategies Engineer integrations with Agentic AI tools for intelligent decisioning, policy enforcement, and autonomous identity lifecycle operations. Develop and implement automated provisioning/deprovisioning workflows Ensure integration of IAM with cloud platforms (Azure, AWS, GCP) and SaaS applications. Mentor and develop the skills of senior security engineers, fostering a culture of continuous improvement and innovation. Technical Experience Must-Have: Privileged Access management (CyberArk) Authentication/AuthN (Okta) Federated Identity (EntraID) Cloud Identity (AWS, GCP, Azure) Automation (terraform, codex, claude) Application SSO (OIDC, SAML) Identity Governance (Sailpoint, Okta, Veza) Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.

Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do The Principal IAM Engineer is the senior technical authority for identity services, responsible for designing, implementing, and governing enterprise-wide IAM capabilities across workforce, partner, and customer identities. This role combines deep hands-on engineering with architecture and leadership, driving the modernization of authentication, authorization, identity lifecycle, and privileged access controls across our cloud and on-prem environments. Responsibilities: Own the end to end technical delivery of IAM services, including identity lifecycle management, authentication, authorization, SSO, and privileged access controls, ensuring they are secure, scalable, and highly available. Lead design sessions, collaborating with Entrprise Architecture, and implementation of IAM integrations for SaaS, on prem, and AWS cloud platforms, including federation (SAML, OIDC, OAuth), MFA, and Passwordless capabilities. Serve as the primary escalation point for complex IAM engineering issues; perform root cause analysis and drive long term remediation and hardening of IAM platforms and related services. Partner with security architecture, infrastructure, application, and HR/IT teams to align IAM solutions with enterprise security strategy, compliance obligations, and business objectives. Define IAM engineering standards, patterns, and reference architectures; guide other engineers in implementing secure onboarding patterns for applications into IGA, PAM, and SSO platforms. Lead modernization initiatives. Contribute to audits, risk assessments, and regulatory reviews by providing technical evidence, designing compensating controls, and closing identified IAM control gaps. Mentor and coach IAM engineers and analysts, promoting engineering excellence, documentation discipline, and a culture of continuous learning and improvement. What You'll Bring 10+ years of experience in information security or infrastructure engineering, with at least 5 years of hands-on-keyboard experience with core IAM platforms. Deep expertise with the majority of our IAM stack Strong hands-on experience with Microsoft Entra ID and Active Directory as foundational directory services, and extensive experience implementing federation protocols (SAML, OIDC, OAuth2). Proven track record designing and implementing IAM solutions in hybrid multi-cloud environments, including the automation of provisioning, access reviews, and RBAC/ABAC models. Experience with secrets management solutions. Proficiency in at least one scripting or programming language (such as PowerShell, Python, or Java) to automate tasks and build custom connectors for our IAM tools. Excellent communication skills with the ability to translate complex technical concepts related to our IAM ecosystem for both technical and non-technical stakeholders. Exceptional sense of ownership and the ability to work with a limited set of requirements. Highly advanced ability to breakdown work to deliver value incrementally. Experience leading large-scale IAM programs. Prior responsibility as a technical lead or architect for IAM, including mentoring teams and influencing roadmaps beyond direct reporting lines. Demonstrated ability to balance security, usability, and operational efficiency, with a strong bias toward automation and measurable risk reduction. Define and lead the implementation of the organization's security strategy, with a focus on Cloud Security, Identity Access Management, and all other aspects of Cybersecurity Oversee the deployment of IAM solutions across both on-premise and cloud environments, ensuring they meet the highest standards of security. Lead the most complex security assessments, including threat modeling, red teaming, and cloud security reviews. Collaborate with executive leadership to ensure that security initiatives align with the organization's strategic goals and risk appetite. Act as the technical lead for large-scale security projects, coordinating cross-functional teams to ensure successful delivery. Architect and implement solutions across workforce IAM, PAM, and customer IAM ecosystems. Provide thought leadership in adopting passwordless authentication, passkeys, adaptive MFA, and AI-driven access orchestration strategies Engineer integrations with Agentic AI tools for intelligent decisioning, policy enforcement, and autonomous identity lifecycle operations. Develop and implement automated provisioning/deprovisioning workflows Ensure integration of IAM with cloud platforms (Azure, AWS, GCP) and SaaS applications. Mentor and develop the skills of senior security engineers, fostering a culture of continuous improvement and innovation. Technical Experience Must-Have: Privileged Access management (CyberArk) Authentication/AuthN (Okta) Federated Identity (EntraID) Cloud Identity (AWS, GCP, Azure) Automation (terraform, codex, claude) Application SSO (OIDC, SAML) Identity Governance (Sailpoint, Okta, Veza) Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.

IAM Delivery Consultant Up to £81K Hybrid (UK) - Must be comfortable to travel to client sites UK wide Must be eligible for SC clearance UK nationals only A leading cybersecurity consulting practice is looking for an experienced Identity & Access Management (IAM) Delivery Consultant to support large-scale digital identity transformation programmes across major organisations. You'll work with clients to modernise how they manage identity, access, and privileged accounts , delivering strategy, design, and implementation of IAM solutions. Location: UK-wide (Hybrid - office, client site & home) Travel: Occasional client site travel depending on project Eligibility: UK nationals only Key Areas: Access Management Identity Governance & Administration (IGA) Privileged Access Management (PAM) Key Responsibilities: Understand and define IAM business requirements Design and implement IAM solutions and architecture Deliver IAM technology and process improvements Advise clients on IAM strategy and transformation Develop IAM Target Operating Models and governance processes Contribute to or lead IAM delivery projects Skills & Experience: Experience in IAM consulting or advisory roles Designing and delivering IAM solutions and architectures Developing IAM operating models and processes Experience in delivering IAM solutions using technologies like Microsoft Azure, Ping Identity, Okta, SailPoint, Saviynt, CyberArk, BeyondTrust - or other modern IAM tools Salary: Up to £81,000 + benefits Excellent opportunity to join a growing digital identity consulting team delivering impactful IAM programmes. Interested or know someone suitable? Feel free to get in touch. RSG Plc is acting as an Employment Agency in relation to this vacancy.

Identity Access Management (IAM) roles London / Manchester / Leeds / Edinburgh Hybrid - 2/3 days per week in office£55,000 - £115,000 + benefits Consultant Senior Consultant Manager Senior Manager Architect Associate Director Hays Technology are working with a global business consultancy organisation who are looking for a variety of Identity and Access Management professionals. The team you'll be working within are responsible for providing Identity and Access Management services to a wide range of clients. You'll be working on projects to provide IAM solutions to clients, running IAM diagnostics, assisting with strategy definition and minimising IAM risk for clients.These are roles that will require a good degree of technical knowledge spanning one or multiple of the IAM solutions listed further below. The roles will also require excellent communication skills alongside stakeholder engagement and management ability for the consulting side of the positions. Throughout your career with this organisation you may choose to stick more to the technical side of things, or may be more interested in the business consultancy side of things. This is a role that will allow you to grow with the business and my client will play to your strengths. The ideal candidate to start this role, however, will have a mixture of consulting experience and IAM technical expertise. The roles are hybrid and will be based in London / Manchester / Leeds / Edinburgh What you'll be doing (dependent on role seniority) Consulting with clients across a variety of sectors on IAM solutions Supporting on complex client engagements Running IAM diagnostics Assisting with application onboarding Preparing solutions to be released to clients Supporting and providing specialised input into IAM implementations of various scales IAM requirements gathering Providing outbound specialised expertise on IAM tools and their integration with client systems Gaining an understanding of clients' businesses, offering suggestions, providing IAM support Communicating effectively with technical and non-technical stakeholders Acting as an SME on IAM controls needed by clients What we're looking for: IAM expertise: understanding of technical controls and contemporary IAM risks Experience utilising/implementing one or more of the following, the more the better: Okta, Entra ID, BeyondTrust, Oneidentity, CyberArk, Sailpoint, Saviynt. Eligibility for SC clearance Experience consulting within the IAM space Demonstrable internal and external stakeholder engagement and management ability Good time management A resilient personality able to deal with a fast-paced environment What you'll get in return In addition to a salary of between £55,000 to £115,000, you'll also receive a variety of benefits, such as: Annual bonus - % dependent on role seniorityCar/cash allowance - £ dependent on role seniority Progression plans and growth opportunities within National and Global teams Good holidays and pension What you need to do now If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career. Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk

Identity and Access Management Senior Architect (Manager/Senior Manager) London / Manchester / Leeds / Edinburgh Hybrid - 2/3 days per week in office Permanent - £70,000 - £105,000 + benefits Hays Technology are working with a global business consultancy organisation who are looking for a variety of Identity and Access Management professionals. The team you'll be working within is responsible for providing Identity and Access Management services to a wide range of clients. You'll be working on projects to provide IAM solutions to clients, running IAM diagnostics, assisting with strategy definition and minimising IAM risk for clients. What you'll be doing: Define IAM use cases, functional and non-functional solution requirements, and technical specifications, such as those for user authentication, access control, integration, performance and scalability requirements and specifications. Design and architect IAM solutions by creating high-level and low-level designs that align with business objectives and comply with industry cybersecurity standards. Creating high-level and low-level system architecture diagrams with technical descriptions of each component. Defining the system specifications to support optimal performance. Integrating workflows with third-party systems and security tools, such as Security Information and Event Management (SIEM) solutions, multi-factor authentication solutions, and cloud platforms like Amazon Web Services (AWS) and Azure. Develop technical documentation for IAM implementations including process documentation to enable solution operation (e.g., defining processes for user onboarding, access requests, identity governance, approval workflows, authentication workflows, and provisioning/de-provisioning tasks). Implement IAM solutions Install solution components in on-premise environments where relevant, or configuration of cloud components (and scripting / coding of plug-ins / extensions for cloud solutions) What we're looking for: Broad enterprise identity experience across IGA, PAM, AM, AD, CIAM, with demonstrable ability to build identity strategies which integrate into client enterprise architectures and beyond. Experience of working with IGA, PAM, AM, AD, CIAM solutions such as SailPoint, Saviynt, etc. Experience working in a digital transformation environment supporting the definition of Identity architecture leveraging cloud native and/or other IAM solutions. Advanced, practical experience with cloud hosting services including, Amazon Web Services, Microsoft Azure, Google Cloud Platform. Hands-on experience of Microsoft Active Directory/Azure AD Domain Services, Federation Services, Certificate Services, DNS and DHCP. Understanding of decentralised identity, verifiable credentials, microservices and Trust over IP architecture stack. Experience with waterfall and agile type methodologies, often working within client-specified frameworks. Managing teams across a mix of locations, cultures, and experience levels. Detail oriented and strong problem-solving skills. Excellent oral and written communication skills. Desirable: Understanding of malware and the modern threat landscape Relevant certifications (e.g. CIAM, CISSP, CAMS, etc.) Exposure to/Understanding of DevOps tools and repositories (e.g. Git, Azure DevOps, Kubernetes, Docker, Jenkins, Ansible etc.) Role-based access control (RBAC) design Practical experience with Linux operating systems Experience with Modern Authentication concepts e.g. Self-Service Identity, Bring your own Identity, SCIM, SAML, WS-Federation, OAuth, Open ID Connect What you'll get in return In addition to a salary of between £70,000 to £105,000, you'll also receive a variety of benefits, such as: Annual bonus - % dependent on role seniority Car/cash allowance - £ dependent on role seniority Progression plans and growth opportunities within National and Global teams Good holidays and pension Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk

IAM Delivery Consultant Salary: £70,000 - £85,000 + Benefits Location: UK (Hybrid Working) About the Role We are seeking an experienced IAM Delivery Consultant to join a growing cybersecurity and digital identity practice. This role sits at the heart of delivering modern Identity and Access Management (IAM) solutions, helping organisations strengthen security, improve user experience, and meet regulatory requirements. You will work across a variety of client engagements, contributing to the design, implementation, and transformation of IAM capabilities across enterprise environments. Key Responsibilities Gather and define IAM business and technical requirements Design and deliver IAM solutions across enterprise and customer environments Support IAM strategy and transformation initiatives Implement and optimise IAM processes and technologies Contribute to or lead IAM project delivery Collaborate with stakeholders to ensure solutions meet business needs What We're Looking For We welcome candidates from a range of backgrounds, whether your experience is more technical, business-focused, or a blend of both. Experience in one or more of the following areas is desirable: IAM consulting or advisory IAM architecture and solution design Identity Governance & Administration (IGA) Access Management and authentication solutions Privileged Access Management (PAM) Development of IAM operating models and processes Hands-on experience with IAM technologies such as Azure AD, Okta, Ping Identity, SailPoint, Saviynt, CyberArk, or similar is highly beneficial. Relevant certifications are also advantageous. Security Requirements Candidates must be eligible for UK Security Check (SC) clearance, which typically requires continuous UK residency for the past 5 years.