IAM Specialist

Job Description

\n

Job Title: IAM Specialist
Location: Culham, UK
Job Type: Full-time contract, Until 18/12/2026
Work Model: Hybrid (2-3 days/week on site)

\n

Minimum Requirement:
\n The IAM Specialist will be responsible for the hands-on implementation and configuration of Client's Identity Governance and Administration (IGA) platform. Working within the cyber security team, you will integrate the IGA solution with Microsoft Entra ID, connect authoritative sources (HR systems, contractor databases), and build joiner-mover-leaver (JML) processes with automated approval workflows. This is a technically focused implementation role requiring deep expertise in IGA platforms and identity life cycle management. You will work closely with HR, IT operations, and application owners to ensure identity data flows correctly and access provisioning meets business requirements.

\n

Key Accountabilities:
\n Implement and configure the IGA platform (SailPoint, Saviynt, Omada, or similar) to meet Client requirements
\n Integrate the IGA solution with Microsoft Entra ID as the primary Identity Provider
\n Connect authoritative sources (HR systems, contractor databases) to drive identity life cycle
\n Design and implement joiner-mover-leaver (JML) processes with automated provisioning and deprovisioning
\n Build and configure approval workflows for access requests, role assignments, and exceptions
\n Implement access certification campaigns and recertification processes
\n Develop role mining and role-based access control (RBAC) models in collaboration with business owners
\n Configure application connectors for target systems (AD, Entra ID, SaaS applications, on-prem systems)
\n Implement segregation of duties (SoD) policies and access risk analytics
\n Configure SSO and federation services using SAML, OAuth 2.0, OpenID Connect, and SCIM
\n Support identity data quality management and remediation activities
\n Troubleshoot provisioning failures, synchronisation issues, and connector errors
\n Collaborate with application owners during onboarding to define access models and entitlements
\n Maintain documentation of IGA configurations, workflows, and integration specifications

\n

Essential:
\n Hands-on experience implementing IGA platforms (SailPoint, Saviynt, Omada, One Identity, or similar)
\n Proven experience integrating IGA with Microsoft Entra ID/Azure AD
\n Experience connecting authoritative sources (HR systems, databases) to IGA platforms
\n Strong understanding of identity life cycle management and JML process automation
\n Experience building approval workflows and access request processes
\n Knowledge of access certification, recertification, and attestation campaigns
\n Understanding of RBAC modelling, role mining, and entitlement management
\n Experience with application connector development and configuration
\n Strong understanding of authentication protocols (SAML, OAuth 2.0, OpenID Connect, SCIM)
\n Knowledge of directory services (Active Directory, LDAP) and hybrid identity
\n Working knowledge of security frameworks: ISO 27001, NIST CSF
\n Strong troubleshooting skills for provisioning and synchronisation issues
\n Good documentation skills for technical configurations and runbooks

\n

Desirable:
\n Degree in Information Security, Computer Science, or related STEM field
\n Vendor certifications in IGA platforms (SailPoint, Saviynt, Omada)
\n Microsoft certification: SC-300 (Identity and Access Administrator)
\n Experience with segregation of duties (SoD) policies and access risk analytics
\n Scripting skills (PowerShell, Python) for automation and connector development
\n Experience with API integration and web services
\n Familiarity with ITSM workflows and change control procedures
\n Experience in public sector or critical national infrastructure environments