> Markdown version of [/jobs/ext/2387462-iam-engineer](https://www.wearedevelopers.com/jobs/ext/2387462-iam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IAM Engineer - **Company:** Odevo - **Location:** London, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Active Directory, Artificial Intelligence, Bash Shell, Continuous Integration, Identity and Access Management, Information Technology Operations, Python (Programming Language), Lightweight Directory Access Protocols (LDAP), OAuth, OpenID, Public Key Infrastructure, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Ansible, Zero Trust Network Access, Security Assertion Markup Language (SAML), User Provisioning Software, Customer Identity Access Management, SailPoint, Terraform - **Published:** August 11, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=50542a10894ec19c ## About the Role You are a senior IAM specialist who enjoys going deep into complex technical environments and taking ownership of solutions from design through to operation. You have strong technical judgement and a pragmatic approach to security, knowing when to challenge, when to simplify and how to make robust solutions work in practice. You are curious about new technology and how AI can improve security and operations, while keeping a strong focus on reliability and risk. You are comfortable working independently, solving complex problems and sharing your expertise with others., * Proven senior-level, hands-on experience in IAM engineering across complex or hybrid environments. * Deep expertise in Microsoft Entra ID and Active Directory, including Entra Connect, Group Policy and hybrid identity. * Advanced PowerShell skills and experience automating IAM processes at scale. * Hands-on experience with IGA platforms, ideally SailPoint and/or Saviynt. * Experience with PAM/PIM, privileged access, credential management and time-bound elevation. * Strong understanding of RBAC/ABAC, least privilege, Zero Trust and segregation of duties. * Solid knowledge of identity protocols including SAML, OAuth2, OIDC, SCIM and LDAP. * Strong analytical and troubleshooting skills, with the ability to investigate complex access issues and reduce risk. * Experience automating identity lifecycle processes such as joiner-mover-leaver and access reviews. Desired * Experience with Python and/or Bash alongside PowerShell. * Experience applying AI or intelligent automation to IT operations or security. * Experience with Terraform, Ansible and/or CI/CD for identity deployments. * Exposure to PKI/ADCS, machine identities or workload identities. * Experience across workforce IAM and CIAM. * Relevant certifications such as SC-300, SC-100, AZ-500, CISSP or CISM. * Experience working in a multi-country or decentralised organisation. * Familiarity with ISO 27001, SOC 2, GDPR or NIST2. ## Description We are now looking for a Senior IAM Engineer to take a key role in shaping the next generation of Odevo's Identity & Access Management capabilities. This is a hands-on specialist role for someone who enjoys solving complex identity challenges, building robust solutions, and raising the technical maturity of an IAM environment. You will work across Microsoft Entra ID, Active Directory, identity governance, and privileged access, with a strong focus on automation, security, and lifecycle management. You will have the opportunity to influence both the technical direction and the way IAM is operating across Odevo's markets., * Design, build and maintain identity solutions across Microsoft Entra ID and Active Directory, including hybrid identity, Conditional Access and federation. * Develop advanced PowerShell automation for identity lifecycle management, provisioning, deprovisioning and reporting. * Help mature Identity Governance and Administration (IGA) using platforms such as SailPoint and/or Saviynt, including access certification, RBAC and policy enforcement. * Manage and strengthen Privileged Access Management (PAM) and PIM, including vaulting, credential rotation and just-in-time access. * Own the lifecycle and security of user, privileged, service, shared, break-glass and machine identities. * Act as a senior escalation point for complex identity issues and integrations using SAML, OAuth2, OIDC, SCIM and LDAP. * Drive modern authentication and identity security practices, including MFA, passwordless/FIDO2, least privilege and Zero Trust. * Automate and improve IAM operations, including exploring AI-enabled approaches such as anomaly detection and intelligent access-review support. * Partner with Technology, Risk & Compliance and local teams to ensure consistent IAM standards across Odevo. * Provide technical mentorship and contribute to IAM architecture, documentation and the long-term strategy and roadmap., * Modern technology - we invest in the latest technologies and tools and encourage our team members to share their ideas and take ownership of their work. * Innovation - to work on exciting projects that push the boundaries of our industry and make a real impact. * Commitment to quality - a dynamic and forward-thinking company that values profitable and long-term product development. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [The Intent Engineer: Closing the Gap Between Business & Engineering - Manuel Klein](https://www.wearedevelopers.com/videos/1855-the-intent-engineer-closing-the-gap-between-business-engineering-manuel-klein) - [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)