> Markdown version of [/jobs/ext/1475377-iam-security-engineer](https://www.wearedevelopers.com/jobs/ext/1475377-iam-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IAM Security Engineer

- **Company:** Iam
- **Location:** Bradford, UK
- **Contract:** Permanent contract
- **Skills:** Kubernetes Security, User Authentication, Cloud Computing Security, Cyber Security, Identity and Access Management, Key Management, Public Key Infrastructure, Zero Trust Network Access, Policy as Code, SSL Certificate Management, Software Security, Kubernetes, CIS Benchmarks, Devsecops
- **Published:** July 29, 2026
- **Apply:** https://www.apply4u.co.uk/jobs/x/42278399/

## About the Role

* Information Security Engineering

 * Identity and Access Management (IAM)

 * Zero Trust Architecture

 * Authentication and Authorisation

 * Workload Identity

 * Agent Identity

 * PKI and Certificate Management

 * Cryptography

 * Cloud Security (GCP)

 * Kubernetes Security

 * API Security

 * Policy-as-Code (OPA)

 * DevSecOps

## Description

The client is undergoing a transformation of its Identity and Access Management practices including the delivery of a set of net new tools to overhaul how IAM is carried out in the industry. We are seeking experienced and dynamic Security Engineer who have an excellent understanding of Identity Management, with a successful track record of working in complex global organisations at fast pace.

In this role, you will:

 * Design and implement security controls across the IDAM 2.0 platform.

 * Embed Secure by Design principles throughout solution delivery.

 * Implement and maintain Zero Trust security controls.

 * Configure and maintain authentication and authorisation security mechanisms.

 * Implement secure service-to-service communication using mutual TLS (mTLS).

 * Implement and maintain Policy-as-Code solutions using OPA and related technologies.

 * Integrate secrets management, PKI and certificate lifecycle services.

 * Support cryptographic key management and certificate rotation processes.

 * Perform security reviews of solution designs, infrastructure and application code.

 * Conduct threat modelling and security risk assessments.

 * Develop and maintain security baselines, standards and hardening guides.

 * Implement cloud security controls for GCP resources and Kubernetes platforms.

 * Support identity governance, privileged access and least privilege implementation.

 * Collaborate with Security Operations and Incident Response teams during security events.

 * Support security assurance for third-party integrations and supplier solutions.


## Related Videos

- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [Kubernetes Security Best Practices](https://www.wearedevelopers.com/videos/1411-kubernetes-security-best-practices)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)