> Markdown version of [/jobs/ext/1123665-iam-engineer](https://www.wearedevelopers.com/jobs/ext/1123665-iam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IAM Engineer - **Company:** SmartChoice International Limited - **Location:** Bristol, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Artificial Intelligence, Computing Platforms, Authentication Protocols, Cloud Engineering, Multi-Factor Authentication, Identity and Access Management, OAuth, OpenID, Ping (Networking Utility), Openid Connect, Azure Active Directory, Security Assertion Markup Language (SAML), Single Sign-On, User Provisioning Software, Okta, Cyberark, Customer Identity Access Management - **Published:** July 2, 2026 - **Apply:** https://find.jobs/jobs-near-me/apply/ats-redirect/?id=2850729213-2 ## About the Role * Minimum 4 years of experience in Identity and Access Management (IAM), Identity Security, or related cybersecurity function * Hands-on expertise with enterprise identity platforms such as Okta, Microsoft Entra ID (Azure AD), or Ping Identity * Strong understanding of authentication and authorization standards, including SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC) * Experience implementing and supporting Privileged Access Management (PAM) solutions such as CyberArk or BeyondTrust * Practical knowledge of access governance, entitlement management, and role engineering methodologies * Familiarity with automated user provisioning and lifecycle management using SCIM Preferred Qualifications * Exposure to Customer Identity and Access Management (CIAM) or developer-focused identity solutions. * Understanding of modern security concepts such as Zero Standing Privilege (ZSP) and Just-in-Time (JIT) access * Relevant certifications such as Microsoft SC-300, Okta Certified Professional * Experience supporting access controls within cloud-native or AI-enabled environments is a plus. ## Description We are seeking an experienced IAM Engineer to support and secure access management for AI-driven development platforms, including Claude Code. This role will be responsible for designing, implementing, and governing identity controls that ensure users and services receive appropriate access throughout their lifecycle while maintaining strong security and compliance standards, * Configure and manage authentication mechanisms such as Single Sign-On (SSO) and Multi-Factor Authentication (MFA) through enterprise identity providers * Develop and maintain role-based access models to ensure users have appropriate permissions based on their responsibilities * Administer privileged access controls and safeguard administrative functions within AI development environments * Perform periodic access certification reviews, identify excessive permissions, and coordinate remediation activities * Oversee provisioning, modification, and de-provisioning processes for user and service accounts * Manage identity requirements for automated workflows, CI/CD pipelines, and integrations involving AI agents and services * Investigate and respond to identity-related security incidents, including unauthorized access attempts and compromised accounts * Collaborate with security, platform, and engineering teams to strengthen access governance and align with least-privilege principles ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [No More Post-its: Boost your login security with APIs](https://www.wearedevelopers.com/videos/1043-no-more-post-its-boost-your-login-security-with-apis) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere) - [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer)