IAM Platform Engineer - Authentication, Credentials & PAM

As IAM Platform Engineer, you own authentication, identity federation, credential management and privileged access platforms. You will modernise our identity infrastructure with scalable, standards-based IAM services that are secure and easy for engineering teams to consume. You’ll shape the future of authentication and privileged access within a leading quantitative research firm, tackling large-scale engineering challenges. This role offers the chance to impact platform strategy and security across the tech estate.

• Highly competitive compensation plus annual discretionary bonus
• Lunch provided via Just Eat for Business
• 35 days’ annual leave
• 9% company pension contributions
• Comprehensive healthcare and life assurance
• Cycle-to-work scheme

• Designing, implementing and supporting enterprise authentication and identity federation services
• Developing standard onboarding patterns for applications using SAML, OAuth2 and OpenID Connect
• Improving and rationalising our identity provider estate, including PingFederate, PingAM and cloud identity platforms
• Engineering secure privileged access solutions using Teleport and Just-in-Time access principles
• Defining standards for service accounts, certificates, secrets and machine identities
• Building APIs and automation to simplify identity platform operations
• Partnering with engineering teams to deliver reusable, secure authentication services
• Improving operational maturity through monitoring, alerting, logging, documentation and automation
• Supporting migration away from bespoke authentication implementations towards enterprise IAM standards

• Experience engineering and operating enterprise IAM platforms
• Experience with PingFederate, PingAM, Microsoft Entra ID or Okta
• Strong understanding of authentication, authorisation, Active Directory, LDAP and privileged access management
• Experience applying modern platform engineering practices, including infrastructure as code, CI/CD, automation and observability
• Software engineering experience in languages such as C#, Java, Python or Go
• Experience building APIs and automating identity platform services
• Experience supporting hybrid on-premises and cloud identity platforms, including Kubernetes

• collaboration
• clear communication
• problem-solving
• Enterprise IAM platforms
• Identity providers: PingFederate, PingAM, Microsoft Entra ID, Okta
• Authentication and authorization concepts, Active Directory, LDAP