> Markdown version of [/jobs/ext/2929232-iam-engineer](https://www.wearedevelopers.com/jobs/ext/2929232-iam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IAM Engineer - **Company:** Sanderson Recruitment Plc - **Location:** London, UK - **Experience:** Expert - **Salary:** £70,000.0 - £75,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Application Programming Interfaces (APIs), User Authentication, Microsoft Azure, Microsoft Online Services, Cyber Security, DevOps, Github, Identity and Access Management, Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), NT LAN Manager, OAuth, OpenID, PCI Data Security Standards, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Zero Trust Network Access, Security Assertion Markup Language (SAML), Azure Powershell, HybridCloud, Microsoft InTune, Infrastructure Automation Frameworks, Deployment Automation, SailPoint, Terraform - **Published:** September 16, 2026 - **Apply:** https://www.reed.co.uk/jobs/iam-engineer/57352143 ## About the Role * 5+ years' experience in Identity & Access Management, Infrastructure Engineering or Hybrid Cloud environments * Strong expertise across Microsoft Entra ID, Active Directory and Azure * Experience delivering hybrid-to-cloud identity transformation programmes * Hands-on experience with Azure AD Connect, identity synchronisation and directory services * Strong knowledge of Microsoft Intune, Endpoint Management and Group Policy migration * Experience implementing Conditional Access, Identity Governance, PIM, MFA and SSO solutions * Deep understanding of authentication and identity protocols including LDAP, Kerberos, NTLM, SAML, OAuth2 and OIDC * Experience adopting Zero Trust principles and improving enterprise identity security posture * Strong scripting and automation experience using PowerShell, Azure CLI and Microsoft Graph API * Ability to develop technical documentation, architecture designs and communicate effectively with technical and business stakeholders Key Technologies * Microsoft Entra ID * Microsoft Active Directory * Azure AD Connect * Microsoft Intune * Microsoft Azure * Conditional Access * SSO & MFA * Identity Governance * Privileged Identity Management (PIM) * PowerShell * Microsoft Graph API * Zero Trust Security Nice to Have * Microsoft certifications such as SC-300, SC-100, AZ-104 or Enterprise Administrator Expert * Experience with Microsoft Defender for Identity, Sentinel or Purview * Knowledge of CIS, NIST, PCI DSS, ISO 27001 or similar security frameworks * Experience retiring legacy identity and infrastructure services including ADCS, RADIUS or LDAP-based applications * Exposure to Terraform, GitHub, Azure DevOps and Infrastructure Automation * Familiarity with SailPoint, Saviynt or other Identity Governance solutions * Experience working within Agile delivery environments This role is ideal for someone who has successfully managed both Active Directory and Entra ID environments and understands the practical realities of transitioning from legacy infrastructure to a modern cloud-first identity platform. We're looking for a self-sufficient engineer who can take ownership of the IAM roadmap, communicate confidently with senior stakeholders, and deliver meaningful transformation while remaining hands-on with technology., * CLI * Kerberos * Management * ISO 27001 * SailPoint * Identity and Access Management (IAM) * NTLM * DevOps * ISO Standards * Structured Finance ## Description Are you an experienced Identity & Access Management Engineer with a passion for modernising enterprise identity platforms and delivering cloud-first security solutions? We're looking for a hands-on Senior IAM Engineer to take ownership of our identity strategy and lead the transformation from a traditional Active Directory environment to a modern Microsoft Entra ID-centric architecture. This is a unique opportunity to play a pivotal role in shaping the future of identity and access management across a growing retail organisation. You'll work closely with Cyber Security, Infrastructure, Network and Application teams to deliver a secure, scalable and compliant identity platform while acting as the subject matter expert for IAM technologies, governance and modern authentication. What You'll Do * Own and deliver the organisation's IAM strategy and roadmap * Lead the transition from traditional Active Directory services towards a cloud-first Entra ID architecture * Design and manage hybrid identity solutions across Active Directory, Entra ID and Azure * Implement and enhance SSO, Conditional Access, MFA and passwordless authentication capabilities * Drive identity governance initiatives including RBAC, PIM, access reviews and entitlement management * Lead device modernisation projects using Microsoft Intune and Windows Autopilot * Reduce dependency on legacy Active Directory services through structured migration and transformation programmes * Collaborate with Security teams to strengthen identity security and Zero Trust controls * Create architecture documentation, technical standards and executive-level presentations * Support the retirement of legacy authentication methods and infrastructure services * Automate IAM and infrastructure processes using PowerShell, Microsoft Graph API and Azure tooling * Provide technical leadership across identity-related projects and mentor colleagues where required ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Innovating Developer Tools with AI: Insights from GitHub Next](https://www.wearedevelopers.com/videos/1268-innovating-developer-tools-with-ai-insights-from-github-next) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [CI/CD with Github Actions](https://www.wearedevelopers.com/videos/856-ci-cd-with-github-actions) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)