IAM (Identity and Access Management) Engineer

Position

IAM Engineer

Group

London 

Reports to

Head of Technology Operations

Direct reports

0 

Internal relationships

• Technology Colleagues
• Business colleagues
• NBKI Information Security Office 
• Human Resources

External relationships

• NBKI Technology partners

Number of full time equivalent employees: 0

Grade:

Job purpose

As an IAM Engineer at NBKI, you will play a key role in strengthening and maturing our identity and access management (IAM) capabilities. 

You will lead efforts to improve the maturity, consistency, scalability, and effectiveness of IAM processes, while actively collaborating with technology and business teams on major projects and transformation initiatives. This is a critical role that balances strategic improvement with hands-on engineering and advisory responsibilities.

Key responsibilities and accountabilities

IAM Process Maturity & Governance
• Design, implement and make continual improvements to IAM policies, procedures, governance and workflows aligned with industry best practices (e.g., NIST, ISO, CIS).

• Develop documentation, Knowledge base articles, standards, and controls to support audit, compliance, and regulatory requirements.

Project Engagement & Delivery
• Act as the IAM subject matter expert (SME) on strategic technology and business projects.
• Review architectural designs and ensure integration of IAM principles such as least privilege, RBAC/ABAC, and Zero Trust.
• Define IAM requirements and work closely with cross-functional teams to ensure secure and compliant access controls.

Transition IAM from projects into BAU IAM models

Engineering & Technical Oversight
• Design and implement solutions for identity lifecycle management, authentication (MFA/SSO), and access governance.
• Integrate IAM systems with on-prem and cloud (e.g., Azure AD) applications and infrastructure.
• Support automation initiatives to improve efficiency and reduce risk in access provisioning/deprovisioning.

Provisioning & Support

• Provisioning, amendment and removal of user access rights that have been approved per IAM processes
• Ongoing lifecycle management and maintenance of user access rights and data quality of user’s details across NBKI Technology’s platforms,services and 3rd party vendors.

Risk & Compliance Alignment
• Collaborate with risk, audit, and compliance teams to remediate IAM-related findings and vulnerabilities.
• Ensure alignment with UK regulatory expectations where applicable.
• Stay current on IAM trends, threats, and technologies; propose innovation where appropriate.

Any other tasks at the discretion of the Head of Technology Operations.

Committee membership/involvement

None at present.

Qualification & Experience

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
• 3+ years of experience in identity and access management, preferably in a regulated industry (e.g., financial services or banking).
• Relevant certifications: CISSP, CISM, Azure Security Engineer, Certified Identity and Access Manager (CIAM), etc.
• Experience implementing or optimizing IAM in hybrid cloud environments.
• Strong understanding of IAM domains: identity lifecycle, authentication, authorization, privileged access management, and access reviews.
• Hands-on experience with IAM platforms such as Azure AD, CyberArk, or similar.
• Proven experience developing and improving IAM processes and governance frameworks.
• Experience working with IT projects, including requirements gathering, design reviews, and deployment support.
• Knowledge of compliance frameworks and regulatory requirements relevant to banking and finance.

Essential Competencies / Skills  

• Analytical thinking
• Planning and Organization
• Effective communication and documentation skills
• Strong interpersonal skills

Key success factors

• Appropriate uplift in maturity of user access management framework to support the delivery of the NBKI Technology strategy and services
• Approved user access management requests are delivered within the agreed SLAs
• Framework process documentation in-place and maintained
• New user access management is transitioned from projects to BAU