Identity & Access Management Engineer

The Identity and Access Management Engineer (Junior) will supports the secure and reliable operation of identity services across the organisation. Working under the guidance of senior team members, the role assists with user lifecycle management, access provisioning, authentication, single sign-on, privileged access and identity governance activities.

The position contributes to project delivery and operational support by following approved standards, documenting work, resolving routine issues and escalating risks or complex technical matters appropriately.

Key Accountabilities and main responsibilities

Strategic Focus

• Support the secure and reliable operation of identity and access management services across the organisation.
• Contribute to IAM, PAM and identity governance initiatives through project delivery and operational support activities.
• Assist in implementing identity standards, controls and automation aligned with the organisation s security strategy.
• Support continuous improvement of identity lifecycle, authentication and privileged access capabilities.

Operational Management

• Manage approved joiner, mover and leaver activities, including user provisioning, de-provisioning, access changes and routine IAM troubleshooting.
• Provision, modify and remove user, service and privileged accounts across supported on-premises and cloud platforms.
• Apply approved access models, including role-based and attribute-based access controls, group membership and entitlements.
• Support periodic access reviews and follow up outstanding certifications, exceptions and remediation actions.
• Assist with the administration, configuration, testing and support of hybrid Active Directory and Microsoft Entra ID environments.
• Support application onboarding for single sign-on, multifactor authentication and automated provisioning using SAML 2.0, OAuth 2.0, OpenID Connect and SCIM.
• Contribute to PowerShell, Microsoft Graph and other scripts or workflows that automate repeatable IAM activities, with peer review before production use.
• Assist with identity services hosted across Azure and AWS and their supporting Windows, Linux and virtualised infrastructure.
• Maintain daily IAM platform stability and compliance through service monitoring, BAU engineering, incident troubleshooting, fulfilment of service requests and controlled changes.
• Troubleshoot access, authentication, federation, directory and provisioning issues using documented procedures, system logs and structured diagnostic techniques.
• Support Active Directory Domain Services and related technologies such as LDAP, Group Policy, DNS, certificate services, forest trusts and remote access services under appropriate guidance.
• Maintain accurate tickets, work notes, configuration records, operational procedures and handover information.

People Leadership

• Build effective working relationships with application owners, Service Desk, infrastructure, cloud, security and project teams.
• Collaborate with senior engineers and Identity Architects to deliver IAM and PAM enhancements.
• Demonstrate accountability, teamwork and a commitment to continuous learning.
• Share knowledge and contribute to team capability through structured learning and practical assignments.

Governance & Risk

• Support the discovery and onboarding of privileged accounts across servers, databases, cloud platforms and enterprise applications.
• Assist with implementation and uplift of privileged-access controls, including conditional access, multifactor authentication, least privilege, account discovery and automated password rotation.
• Follow least-privilege, segregation-of-duties, privacy and privileged-access requirements when administering identity services.
• Support audit and assurance activities by maintaining complete access records, approvals, evidence and operational documentation.
• Identify control gaps, recurring incidents and opportunities for automation or service improvement and escalate recommendations through the appropriate process.
• Escalate risks, exceptions and complex technical matters through appropriate governance processes.

The above list of key accountabilities is not an exhaustive list and may change from time-to-time based on business needs.

Experience & Personal Attributes

Experience

• Degree, diploma or equivalent practical training in information technology, computer science, cybersecurity or a related discipline.
• 4+ years of relevant experience in IAM, directory services, systems administration, IT support or cybersecurity; graduates with relevant practical exposure are encouraged to apply.
• Foundational understanding of identity lifecycle management, authentication, authorisation, least privilege, conditional access, multifactor authentication, RBAC and ABAC.
• Practical exposure to Active Directory and Microsoft Entra ID in a hybrid environment; familiarity with Microsoft Identity Manager or Entra ID Connect is advantageous.
• Working knowledge of SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, LDAP, federation and API concepts.
• Basic to intermediate PowerShell and scripting capability; exposure to Microsoft Graph is desirable.
• Awareness of Windows Server and Active Directory services, including Group Policy, DNS, certificate services and forest trusts.
• Foundational cloud knowledge across Azure or AWS and basic familiarity with virtualisation; Linux exposure is desirable.
• Exposure to PAM or IGA platforms such as CyberArk and SailPoint is advantageous.
• Relevant Microsoft, cloud, IAM or security certifications are desirable but not essential.

Personal Attributes

• Strong problem-solving and troubleshooting skills, with the ability to work independently on assigned tasks and seek guidance for complex or high-risk matters.
• Balanced interest in operational support, incident resolution, debugging and engineering delivery.
• Strong attention to detail and a disciplined approach to approvals, testing, evidence and record keeping.
• Clear written and verbal communication skills and the ability to build constructive relationships with technical teams and business partners.
• Able to prioritise assigned work, meet agreed deadlines, raise blockers early and contribute effectively in a complex enterprise environment.
• Demonstrates integrity, accountability, teamwork and a commitment to continuous learning.