> Markdown version of [/jobs/ext/2446448-senior-iam-engineer](https://www.wearedevelopers.com/jobs/ext/2446448-senior-iam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior IAM Engineer - **Company:** NCC Group - **Location:** Manchester, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Java (Programming Language), JavaScript (Programming Language), Active Directory, Amazon Web Services, Application Integration Architecture, Unit Testing, Microsoft Azure, Cloud Computing, DevOps, Github, Identity and Access Management, Java Servlet, Javaserver Pages, Microsoft Software, Role-Based Access Control, Azure Active Directory, SuccessFactors, Zero Trust Network Access, SAP (Applications), Simple Object Access Protocol (SOAP), Systems Integration, Web Services, Extensible Markup Language (XML), Okta, Cyberark, Beeline, Customer Identity Access Management, Web Technologies, SailPoint, Firewall Services Module, Software Version Control, BeanShell, Workday, Servicenow - **Published:** August 25, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=618812f6c9d1c0df ## About the Role * IAM products such as SailPoint, Saviynt, Okta, Microsoft and others; and/or * PAM products such as CyberArk, Delinea, BeyondTrust, Wallex and others. * Have experience of delivering complex IAM and/or PAM engagements and projects, ideally covering all stages including strategy, design and implementation. * Have experience of developing and delivery of IAM/PAM projects on time and on budget, to a high level of customer satisfaction. * Have strong business, consultancy and technical skills. * Excellent communication, consulting soft skills and presentation skills. * Exceptional written communication and reporting skills. * Experience with Active Directory, Microsoft Entra and other cloud platforms. * Experience with DevOps processes and tools, including exposure with Source Code Management (GitHub) IAM * Have experience with HR processes (JML) and systems and authoritative source integration based on WorkDay, SuccessFactors, Beeline, and application integration such as AD, ServiceNow, SAP, etc. * Have experience with Java, BeanShell/JavaScript, JSP/Servlets * Have experience with web technologies: XML, SPML/SOAP. Web Services and App Services * Hands on experience of SailPoint, Saviynt, Okta, Microsoft or other IAM products * Knowledge of RBAC, SOD, etc. PAM * Have experience of defining privileged access and the supporting the implementation of effective PAM processes * Have experience of account discovery, classification and onboarding of privileged accounts and access * Implementation and integration experience, working with other technical teams to perform the necessary configuration (firewall rules) and onboarding readiness activities * Hands on experience of CyberArk, BeyondTrust, Delina, Microsoft or other PAM products Desired Skills and Qualifications * Demonstrable capability and vendor qualifications is advantageous. * IAM and/or PAM vendor Certifications * Zero trust and SASE knowledge * Cloud related certifications across AWS/GCP/Azure * Cloud IAM native experience across AWS/GCP/Azure * CISM / CISSP / CRISC / ISO 27001 LI/LA / CISA * Experience of core control frameworks, such as, NIST, SANS Top 20 CSC, ISO 27001, Privacy, NIS and CAF. Behaviours * Flexibility in working hours (as per client requirement). * Ability to travel both nationwide and internationally (where required). * Ability to build strong, trust-based working relationships * High standards of work output * Strong and effective communicator * Desire to continually improve and learn new skills. * Self-motivating, innovative and creative ## Description NCC Group are investing in expanding our digital identity service line, to grow and expand capabilities, offerings and propositions. This new global practice will focus on three key core competencies - Identity, Governance and Administration (IGA), Privileged Access Management (PAM), Access Management (AM) and Customer Identity (CIAM). The opportunity is for an IAM technical consultant with hands-on technical experience, performing as an engineer/developer to support large-scale IAM deployments, supporting the implementation of identity lifecycle management, access governance and/or privileged access. The role will be client-facing role, working with other internal IAM SMEs and Cyber team members to support the deployment activities for large enterprise IAM solutions. The consultant will report to the service line leader. This is a fantastic new opportunity to join our Global IAM team. The ideal candidate will have previous IAM/PAM engineering and development experience, and exposure gained from delivering complex IAM engagements, ideally across a broad client base. In addition to your technical skills, you will have strong client facing skills and be comfortable dealing with technical client stakeholders., * Act as a trusted advisor through high-quality delivery, ensuring outcomes exceed client expectations. * Review requirements aligned with project timescales and product configuration capabilities, to ensure best practice is applied in all stages of the design and development. * Perform development activities to support the integration with target applications, covering full lifecycle activities with implementation of key JML processes and integration configuration. * Support colleagues and client stakeholders to support the implementation of IAM services, including the identification of optimisation opportunities. * Ability to operate in an agile delivery model. * Responsible for unit testing of code and configuration. Ability to support peer QA and testing. * Perform post-implementation activities, such as user testing, troubleshooting and support ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Organizational Change Through The Power Of Why - DevSecOps Enablement](https://www.wearedevelopers.com/videos/478-organizational-change-through-the-power-of-why-devsecops-enablement) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) - [Bringing AI Model Testing and Prompt Management to Your Codebase with GitHub Models](https://www.wearedevelopers.com/videos/1536-bringing-ai-model-testing-and-prompt-management-to-your-codebase-with-github-models) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)