Identity and Access Management (IDAM) Engineer

As Britain’s national gas network, we help keep the lights on, businesses running, and homes warm by maintaining the critical infrastructure that transports gas across Great Britain. While providing the energy security Britain relies on today, we’re also helping transform the network for a clean energy future., The Identity and Access Management (IDAM) Engineer designs, implements, supports and continually improves enterprise identity services, including identity governance, authentication, privileged access and directory services. The role enables secure, reliable and compliant access to systems and data while supporting organisational and regulatory requirements., * Deliver secure, reliable enterprise identity solutions and integrations that support business services and regulatory obligations.

• Ensure joiner, mover and leaver processes provide accurate, timely provisioning, modification and deprovisioning of access.

• Maintain effective identity governance, role-based and birthright access, entitlement ownership, segregation-of-duties controls, access reviews and audit evidence.

• Maintain Microsoft Active Directory and Microsoft Entra ID services, including hybrid identity, directory synchronisation, group structures, organisational units and access models.

• Implement and support single sign-on (SSO), federation, multi-factor authentication (MFA) and associated authentication policies and standards.

• Maintain privileged access controls using CyberArk or equivalent privileged access management (PAM) technology, including account vaulting, session controls, reviews and compliance processes.

• Support public key infrastructure (PKI), certificate lifecycle and enterprise secrets-management services, ensuring secure handling of credentials and cryptographic material.

• Develop PowerShell automation that reduces manual effort, improves control effectiveness and produces reliable operational outcomes.

• Deliver upgrades, migrations, incident remediation and service improvements with accurate technical documentation and procedures.

• Provide trusted identity and access management guidance to Cyber Security, Infrastructure, Application Support and business stakeholders.

• Bachelor’s degree in cyber security, computer science, information technology or a related subject, or equivalent professional experience in identity and access management.

• Strong administration experience with Microsoft Active Directory and Microsoft Entra ID, including hybrid identity.

• Practical knowledge of identity and access management (IAM) and identity governance and administration (IGA) principles, identity lifecycles, access governance, role-based access and least privilege.

• Experience supporting single sign-on (SSO), federation and multi-factor authentication (MFA), with knowledge of Security Assertion Markup Language (SAML), Open Authorization 2.0 (OAuth 2.0), OpenID Connect (OIDC), Lightweight Directory Access Protocol (LDAP) and Kerberos.

• Hands-on experience with CyberArk or an equivalent privileged access management (PAM) solution, together with public key infrastructure (PKI) and certificate lifecycle support.

• Strong PowerShell automation, troubleshooting and analytical skills.

• Clear written and verbal communication, including production of technical documentation and procedures.

• Salary up to £70,000 (dependant on experience)

• Market-leading double-match pension (for every £1 you add, we add £2)

• Annual performance bonus (up to 6%)

• 26 days holiday plus 8 statutory days and option to buy 5 additional days

• 10x salary life assurance and income protection

• Flexible opt-in salary sacrifice benefits including private healthcare, car, dental, and technology schemes

• Family-friendly policies, wellbeing support, and professional development opportunities