Senior IAM Engineer

Role Description

• The Senior IAM Platform Engineer is responsible for designing, implementing, and operating identity and access management solutions that support both internal users and customer-facing platforms.

• This role combines deep IAM expertise with a strong engineering mindset. You will work across IAM infrastructure, authentication platforms, and supporting services to build secure, scalable, and reliable identity solutions. The role requires hands-on engineering capability combined with platform ownership, ensuring IAM services are secure, reliable, and continuously improved through automation and DevOps practices.

• You will work closely with Engineering, Platform, and Information Security teams to integrate IAM capabilities into new and existing systems. This includes enabling modern authentication and authorisation patterns and ensuring IAM platforms are deployed and operated according to DevOps and cloud best practices.

• The role has broad technical scope. As well as building and improving IAM capabilities, you will help support and evolve the IAM platform itself, working with modern cloud infrastructure, automation, monitoring, and CI/CD pipelines.

• Demonstrate responsible and effective use of GenAI-assisted development tools (e.g. GitHub Copilot) to improve engineering productivity and quality.

• Success in this role is measured by the reliability and security of IAM services, the quality of integrations with engineering teams, and the ability to continuously improve identity capabilities that support the bank’s growth.

Principal Accountabilities

IAM Platform Engineering

• Design, implement, and maintain secure IAM solutions supporting both Customer IAM and Workforce IAM.

• Configure and operate IAM platforms within the Ping Identity suite, particularly PingDirectory and PingFederate.

• Develop and maintain authentication and authorisation integrations across internal systems and customer-facing platforms.

• Ensure IAM solutions are scalable, resilient, and aligned with modern engineering practices.

• Ensure IAM services meet high availability, resilience, and security standards required for critical banking systems.

Identity Architecture & Integration

• Work with engineering teams to integrate IAM capabilities into applications and services.

• Implement and support modern authentication protocols including SAML, OAuth2, and OpenID Connect.

• Contribute to identity architecture decisions and ensure solutions align with security, compliance, and platform standards.

• Help define patterns for secure identity integration across services and platforms.

• Design and support API-driven identity integrations across internal services and external platforms.

DevOps & Platform Support

• Build and operate IAM platforms using DevOps and infrastructure-as-code practices, enabling automated deployment, configuration, and scaling.

• Implement monitoring, logging, and alerting to maintain visibility and operational health of IAM systems.

• Participate in incident response and troubleshooting for IAM-related issues, providing Tier-3 support where necessary.

• Continuously improve the automation, deployment, and operational management of IAM infrastructure.

Identity Governance & Security

• Work with Information Security, Risk, and Compliance teams to support identity governance and access control processes.

• Contribute to IAM standards, policies, and best practices across the organisation.

• Support initiatives related to access controls, identity lifecycle management, and audit requirements.

• Help ensure identity solutions align with regulatory expectations and internal security frameworks.

Collaboration & Enablement

• Partner with Engineering, Platform, and Product teams to ensure IAM capabilities support new systems and services.

• Provide guidance and education to teams integrating with IAM platforms.

• Document architecture, integrations, and operational procedures to ensure knowledge sharing across teams.

• Contribute to the continuous improvement of IAM tooling, processes, and engineering practices.

Personal Attributes & Experience

Core Experience

• Strong experience working in Identity and Access Management, including both Customer IAM and Workforce IAM.

• Strong hands-on experience with the Ping Identity platform, particularly PingDirectory and PingFederate, including configuration, integration, and operational support in production environments.

• Experience integrating IAM capabilities into distributed systems, enterprise applications, and customer-facing digital platforms.

• Strong understanding of authentication and authorisation standards, including SAML, OAuth2, and OpenID Connect.

• Experience working with Active Directory and Azure Active Directory or comparable identity platforms.

Engineering & Technical Skills

• Strong analytical and problem-solving skills with an engineering-led approach to troubleshooting and system design.

• Experience integrating IAM platforms with applications and services.

• Familiarity with DevOps practices, CI/CD pipelines, and infrastructure automation.

• Experience working with cloud platforms, ideally Microsoft Azure.

• Experience implementing monitoring, logging, and operational support for critical systems.

Collaboration & Communication

· Strong communication skills with the ability to work effectively across engineering, platform, security, and product teams.

· Ability to explain identity concepts and solutions to both technical and non-technical stakeholders.

· Comfortable working in a high-growth engineering environment with evolving platforms and requirements.

Desirable Experience

· Experience with PingOne MFA or other modern multi-factor authentication platforms.

· Exposure to Privileged Access Management (PAM) technologies.

· Experience working in regulated environments, particularly financial services.

· Experience contributing to secure system design and threat modelling.