> Markdown version of [/jobs/ext/340745-identity-and-access-management-lead-engineer](https://www.wearedevelopers.com/jobs/ext/340745-identity-and-access-management-lead-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Identity and Access Management Lead Engineer - **Company:** Bupa - **Location:** Staines-upon-Thames, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Active Directory, Application Programming Interfaces (APIs), Amazon Web Services, Cyber Security, Identity and Access Management, Python (Programming Language), Kerberos (Protocol), Lightweight Directory Access Protocols (LDAP), OAuth, Windows PowerShell, Openid Connect, Cloud Services, Security Assertion Markup Language (SAML), Scripting, Cyberark, SailPoint - **Published:** June 13, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=5706a5e4ec1774d9 ## About the Role * Experience designing and operating IGA/PAM/EIM technologies (CyberArk, SailPoint, BeyondTrust, Saviynt etc.). * Strong understanding of identity technologies (SAML, OAuth, OpenID Connect, LDAP, Kerberos). * Experience integrating IAM with cloud services (AWS, GCP) and on-prem systems. * Hands-on experience with scripting (PowerShell, Python) and automation. * Knowledge of Active Directory, Entra ID, MFA, SSO, federation and identity lifecycle. * Understanding of AI use cases in IAM. * 7+ years in cybersecurity or identity roles, 5+ years in IAM engineering leadership. * Experience in regulated environments and large-scale enterprises. * Professional certifications such as CISSP, CISM, CISA or IAM-specific qualifications. * Strong communication skills and ability to explain technical concepts clearly. ## Description At Bupa, we're here to help people live longer, healthier, happier lives. With no shareholders, we reinvest our profits into improving the health of our customers and the quality of the services we provide. As our IAM Lead Engineer, you will play a vital role in strengthening our security posture by leading the design, development and operation of identity and access management technologies across Bupa Global, India and UK (BGIUK)., * Lead the design, configuration, integration and support of Identity Governance & Administration (IGA), Privileged Access Management (PAM) and Electronic Identity Management (EIM) tools. * Build custom workflows, connectors and automation to support efficient access provisioning. * Integrate IAM solutions with core applications, Active Directory, Entra ID and cloud platforms. * Troubleshoot IAM, access, authentication and identity-related issues. * Implement least-privilege access, zero-trust principles and compliant access governance. * Support audits and produce IAM evidence and reporting. * Monitor platforms, respond to IAM-related incidents and manage remediation. * Identify opportunities for automation and orchestration using PowerShell, Python and APIs. * Collaborate with IT, Security, HR and business teams to deliver solutions that balance strong controls with smooth user experience. * Lead and develop a high-performing IAM engineering team. * Promote a culture of innovation, continuous improvement and security-first thinking. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [No More Post-its: Boost your login security with APIs](https://www.wearedevelopers.com/videos/1043-no-more-post-its-boost-your-login-security-with-apis) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)