> Markdown version of [/jobs/ext/1868880-iam-engineer-identity-access-management-engineer](https://www.wearedevelopers.com/jobs/ext/1868880-iam-engineer-identity-access-management-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IAM Engineer - Identity & Access Management Engineer

- **Company:** Finning International Inc.
- **Location:** Cannock, UK
- **Contract:** Permanent contract
- **Skills:** Active Directory, Application Programming Interfaces (APIs), User Authentication, Configuration Management, Identity and Access Management, OpenID, Windows PowerShell, Security Assertion Markup Language (SAML), Okta, Microsoft Power Automate
- **Published:** August 1, 2026
- **Apply:** https://www.careerjet.co.uk/job/gb11c97ddb6c4e84dfc700fc6dece0730f/eaa

## About the Role

Relevant IAM experience, with strong expertise in Active Directory and Entra ID.
Hands-on experience managing and supporting OKTA, ClearPass, and NPS (asset).
Direct experience with AD * Entra ID transitions.
Proficiency in automation/scripting, including PowerShell and Power Automate.
Proven ownership of GPO design, health, and lifecycle management.
Deep understanding of modern authentication technologies and industry standards.
Microsoft SC-300 or equivalent IAM/security certification desirable

## Description

The IAM Engineer will co-own and advance our authentication capabilities end-to-end. In this role, you will work with leading technologies such as Entra ID, OKTA, ClearPass/NPS, and on-prem Active Directory, ensuring secure, modern, and highly available authentication services worldwide., Authentication & Identity Management
Manage Entra ID configurations for SSO, MFA, and Conditional Access baselines.
Oversee app registrations, enterprise app approvals, and environment hygiene.
Govern admin consent for Graph/API scopes.
Support a multi-domain Active Directory environment and ensure optimised global authentication.
Maintain overall GPO health and configuration management.
Lead transitions between On-Prem AD and Entra ID.
Enhance authentication using FIDO2 and phish-resistant methods.
Monitor authentication service health and publish regular performance and risk reports.
Projects & Strategic Initiatives:
Implement OIDC/SAML federation patterns and SCIM integrations.
Advance Customer IAM journeys and strengthen posture integrations with ClearPass.
Drive identity transition projects and collaborate closely with the broader Global IAM team.


## Related Videos

- [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak)
- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [MCP Mashups: How AI Agents are Reviving the Programmable Web](https://www.wearedevelopers.com/videos/1392-mcp-mashups-how-ai-agents-are-reviving-the-programmable-web)
- [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies)
- [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases)
- [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)