Cloud IAM Engineer

Job Title :Cloud IAM Engineer

Job Location :London, UK

Job Type: Contract

Job Description

Our Cloud Centre of Excellence (CCoE) is looking for an Identity & Access Management Engineer to work as part of a team of engineers in the Cloud Identity Services team to deliver Identity & Access management tooling, processes and controls across the bank s Public Cloud Platforms. You ll work as part of a high performing team who are designing and implementing tooling which meets the bank s Cloud Control Framework, while also delivering capability and agility for value stream consumers. You ll be working across both our Cloud Centre of Excellence and our existing teams in Security to both implement cloud native tooling and integrate with our Cloud Centre of Excellence tooling and controls, as well as the implementation and integration of leading third-party tooling to improve our identity and access controls and processes (e.g., Sailpoint, Saviynt, PING).

Successful candidates will:

Be delivery focused- able to identify change and continuous improvement, design solutions and implement via automated pipelines

Collaborate- as part of a broader Identity function and Cloud Centre of excellence, you ll need to be able to work well within your team and externally, as well as support coaching and upskilling of junior colleagues around you

Be comfortable working at pace, able to solve problems at pace and support the articulation of a vision for strategic change in Identity

What you d get involved with:

Delivery of Native Identity & Access Management Tooling and automation, providing identity and access management capability which serves our customers need, while aligning to our control obligations. Key native capabilities include:

Build and maintenance of automated DevOps / CICD pipelines

Code curation using Terraform (GCP) and PowerShell (azure)

Building the processes and controls associated with native identity and access management processes:

User access management

Identity & access monitoring and alerting

Value Stream and Workstream onboarding

Service account lifecycle management

Integrating Public Cloud identity and access management controls and processes with LBG s incumbent enterprise Identity tooling (Oracle Identity Manager), as well as migration to new tooling when available (Sailpoint, PING Identity), achieving integration with enterprise Identity & Access Management controls:

Joiners, Movers, Leavers

Recertification

Identity Federation and Identity Provider design

Delivery of new SaaS products (Saviynt) and integration into public cloud to deliver improved Privileged Access Management controls and colleague experience.

Essential:

Understanding of Public Cloud platforms, including CICD pipeline technologies

Ability to code and build automation, experience in a language such as Python, PowerShell, Java/Groovy

Proven track record of delivering technical solutions and automation of solutions at scale

Proactively seeks out opportunities and implements service improvements whilst building customer satisfaction

Understanding of the bank s control environments and the role of compliance and security as part of technology design and implementation.

Working collaboratively across multiple labs and teams to help contribute by experimenting with new tools, methods, and approaches.

Support assessment of tools to deliver our objectives, through Proof of Concept and Pilot activities, and ensure their smooth transition into BAU

Desirable:

Experience working in an Identity & Access Management or IT Security function and relevant Security qualifications (CISA, CISM, CISMP, CISSP)

Experiencing and understanding of Microsoft Azure, Google Cloud (GCP) or AWS including security and identity capabilities and tools.

Experience working in agile sprints, understanding of Atlassian product suite (Jira and Confluence) for collaboration

Capability to identify technical risks, articulate the associated IT costs and business impacts, and propose options for resolution

Ability to operate and influence in a complex, large scale and diverse environment

Highly articulate with good verbal and written communication

Experience with data querying and analysis using languages such as SQL or KQL

Experience with Privileged Access Management methodology and technical solutions such as CyberArk, Azure PIM, Saviynt, BeyondTrust.