IAM engineer

At Holland & Barrett, we're over a century old - and building like a startup. Our shift to a fully cloud-native organisation has created a rich mix of internal, partner, and customer-facing systems. To secure this at scale, we're building a modern IAM capability from the ground up - and we're looking for a hands-on IAM Engineer to help bring it to life. This is a greenfield IAM engineering role with real technical ownership. You'll help design, implement, and run identity services that go far beyond basic access control - focusing on governance, automation, and least-privilege access, without slowing the business down. The Role As an IAM Engineer, you'll be a core technical contributor within our IAM function. You'll work hands-on with modern identity platforms, integrating applications, automating identity lifecycle processes, and strengthening controls across our entire digital estate - from workforce IAM to CIAM and privileged access. You'll collaborate closely with the IAM Manager, security teams, and application owners to make identity simple, secure, and scalable. What You'll Do

• Implement, configure, and operate our IAM platforms and tooling
• Integrate internal, partner, and customer-facing applications into central IAM
• Configure and manage MFA, PAM, and segregation of duties controls
• Automate identity lifecycle processes (joiner, mover, leaver, access reviews)
• Enforce least privilege through fine-grained access controls
• Troubleshoot complex identity and access issues
• Contribute to IAM architecture and technical roadmap
  
  Hands-on experience as an IAM Engineer or similar role
• Strong experience with platforms such as Okta, Azure AD, SailPoint, CyberArk
• Solid understanding of SAML, OAuth, and OpenID Connect (OIDC)
• Experience scripting and automating IAM processes (e.g. Python, PowerShell)
• Exposure to both enterprise IAM and CIAM environments
• Strong problem-solving skills and a collaborative mindset