Senior IAM Engineer

Employment: Full Time Workplace: Hybrid NCC Group are investing in expanding our digital identity service line, to grow and expand capabilities, offerings and propositions. This new global practice will focus on three key core competencies - Identity, Governance and Administration (IGA), Privileged Access Management (PAM), Access Management (AM) and Customer Identity (CIAM). The opportunity is for an IAM technical consultant with hands-on technical experience, performing as an engineer/developer to support large-scale IAM deployments, supporting the implementation of identity lifecycle management, access governance and/or privileged access. The role will be client-facing role, working with other internal IAM SMEs and Cyber team members to support the deployment activities for large enterprise IAM solutions. The consultant will report to the service line leader. This is a fantastic new opportunity to join our Global IAM team. The ideal candidate will have previous IAM/PAM engineering and development experience, and exposure gained from delivering complex IAM engagements, ideally across a broad client base. In addition to your technical skills, you will have strong client facing skills and be comfortable dealing with technical client stakeholders. Key Responsibilities Act as a trusted advisor through high-quality delivery, ensuring outcomes exceed client expectations. Review requirements aligned with project timescales and product configuration capabilities, to ensure best practice is applied in all stages of the design and development. Perform development activities to support the integration with target applications, covering full lifecycle activities with implementation of key JML processes and integration configuration. Support colleagues and client stakeholders to support the implementation of IAM services, including the identification of optimisation opportunities. Ability to operate in an agile delivery model. Responsible for unit testing of code and configuration. Ability to support peer QA and testing. Perform post-implementation activities, such as user testing, troubleshooting and support Skills, Knowledge & Expertise Minimum Required Skills Have experience of IAM products such as SailPoint, Saviynt, Okta, Microsoft and others; and/or PAM products such as CyberArk, Delinea, BeyondTrust, Wallex and others. Have experience of delivering complex IAM and/or PAM engagements and projects, ideally covering all stages including strategy, design and implementation. Have experience of developing and delivery of IAM/PAM projects on time and on budget, to a high level of customer satisfaction. Have strong business, consultancy and technical skills. Excellent communication, consulting soft skills and presentation skills. Exceptional written communication and reporting skills. Experience with Active Directory, Microsoft Entra and other cloud platforms. Experience with DevOps processes and tools, including exposure with Source Code Management (GitHub) IAM Have experience with HR processes (JML) and systems and authoritative source integration based on WorkDay, SuccessFactors, Beeline, and application integration such as AD, ServiceNow, SAP, etc. Have experience with Java, BeanShell/JavaScript, JSP/Servlets Have experience with web technologies: XML, SPML/SOAP. Web Services and App Services Hands on experience of SailPoint, Saviynt, Okta, Microsoft or other IAM products Knowledge of RBAC, SOD, etc. PAM Have experience of defining privileged access and the supporting the implementation of effective PAM processes Have experience of account discovery, classification and onboarding of privileged accounts and access Implementation and integration experience, working with other technical teams to perform the necessary configuration (firewall rules) and onboarding readiness activities Hands on experience of CyberArk, BeyondTrust, Delina, Microsoft or other PAM products Desired Skills and Qualifications Demonstrable capability and vendor qualifications is advantageous. IAM and/or PAM vendor Certifications Zero trust and SASE knowledge Cloud related certifications across AWS/GCP/Azure Cloud IAM native experience across AWS/GCP/Azure CISM / CISSP / CRISC / ISO 27001 LI/LA / CISA Experience of core control frameworks, such as, NIST, SANS Top 20 CSC, ISO 27001, Privacy, NIS and CAF. Behaviours Flexibility in working hours (as per client requirement). Ability to travel both nationwide and internationally (where required). Ability to build strong, trust-based working relationships High standards of work output Strong and effective communicator Desire to continually improve and learn new skills. Self-motivating, innovative and creative Job Benefits Flexible Working : Balance your work and personal life with our flexible working options. Generous Holiday Allowance : Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave. Medicash & Critical Illness Scheme Financial & Investment Benefits : Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme. Community & Volunteering Programmes : Make a difference in your community with our volunteering opportunities. Green Car Scheme: Drive green and save money with our eco-friendly car scheme. Cycle Schem e: Stay fit and healthy with our cycle-to-work scheme. Special Time Off : Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet. Family Planning : Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments.