NCC Group

Global cyber security and resilience provider

Senior IAM Engineer

Security Engineering & ArchitectureUpdated on Nov 13

Full-timeManchester, UKNo salary listed

About the Job

Requirements

Experience with IAM products such as SailPoint, Saviynt, Okta, Microsoft, or comparable products, and/or PAM products such as CyberArk, Delinea, BeyondTrust, or Wallex.
Experience delivering complex IAM and/or PAM engagements and projects, ideally across strategy, design, and implementation stages.
Experience developing and delivering IAM/PAM projects on time and within budget to a high level of customer satisfaction.
Strong business, consultancy, and technical skills.
Strong client-facing, communication, consulting, and presentation skills, including written communication and reporting.
Experience with Active Directory, Microsoft Entra, and other cloud platforms.
Experience with DevOps processes and tools, including source code management with GitHub.
Experience with HR processes and systems, including JML processes and authoritative source integrations based on Workday, SuccessFactors, or Beeline, and application integrations such as AD, ServiceNow, or SAP.
Experience with Java, BeanShell/JavaScript, and JSP/Servlets.
Experience with web technologies including XML, SPML/SOAP, web services, and app services.
Knowledge of RBAC and SOD.
Experience defining privileged access and supporting the implementation of effective PAM processes.
Experience with discovery, classification, and onboarding of privileged accounts and access.
Implementation and integration experience, including coordinating technical configuration such as firewall rules and onboarding readiness activities.
Flexibility to work hours required by clients.
Ability to travel nationwide and internationally when required.

Responsibilities

Act as a trusted advisor through high-quality delivery and ensure outcomes exceed client expectations.
Review requirements against project timescales and product configuration capabilities, applying best practice throughout design and development.
Perform development activities to integrate target applications, including full lifecycle activities, key JML process implementation, and integration configuration.
Support colleagues and client stakeholders in implementing IAM services and identifying optimization opportunities.
Work within an agile delivery model.
Perform unit testing of code and configuration, and support peer quality assurance and testing.
Perform post-implementation activities, including user testing, troubleshooting, and support.

Desired Qualifications

Demonstrable capability and vendor qualifications.
IAM and/or PAM vendor certifications.
Knowledge of zero trust and SASE.
Cloud-related certifications across AWS, GCP, or Azure.
Native cloud IAM experience across AWS, GCP, or Azure.
CISM, CISSP, CRISC, ISO 27001 Lead Implementer/Lead Auditor, or CISA qualifications.
Experience with core control frameworks such as NIST, SANS Top 20 CSC, ISO 27001, Privacy, NIS, and CAF.

NCC Group are investing in expanding our digital identity service line, to grow and expand capabilities, offerings and propositions.

This new global practice will focus on three key core competencies - Identity, Governance and Administration (IGA), Privileged Access Management (PAM), Access Management (AM) and Customer Identity (CIAM).

The opportunity is for an IAM technical consultant with hands-on technical experience, performing as an engineer/developer to support large-scale IAM deployments, supporting the implementation of identity lifecycle management, access governance and/or privileged access. The role will be client-facing role, working with other internal IAM SMEs and Cyber team members to support the deployment activities for large enterprise IAM solutions. The consultant will report to the service line leader.

This is a fantastic new opportunity to join our Global IAM team. The ideal candidate will have previous IAM/PAM engineering and development experience, and exposure gained from delivering complex IAM engagements, ideally across a broad client base. In addition to your technical skills, you will have strong client facing skills and be comfortable dealing with technical client stakeholders.

Act as a trusted advisor through high-quality delivery, ensuring outcomes exceed client expectations.
Review requirements aligned with project timescales and product configuration capabilities, to ensure best practice is applied in all stages of the design and development.
Perform development activities to support the integration with target applications, covering full lifecycle activities with implementation of key JML processes and integration configuration.
Support colleagues and client stakeholders to support the implementation of IAM services, including the identification of optimisation opportunities.
Ability to operate in an agile delivery model.
Responsible for unit testing of code and configuration. Ability to support peer QA and testing.
Perform post-implementation activities, such as user testing, troubleshooting and support

Minimum Required Skills

Have experience of

IAM products such as SailPoint, Saviynt, Okta, Microsoft and others;

and/or

PAM products such as CyberArk, Delinea, BeyondTrust, Wallex and others.

Have experience of delivering complex IAM and/or PAM engagements and projects, ideally covering all stages including strategy, design and implementation.
Have experience of developing and delivery of IAM/PAM projects on time and on budget, to a high level of customer satisfaction.
Have strong business, consultancy and technical skills.
Excellent communication, consulting soft skills and presentation skills.
Exceptional written communication and reporting skills.
Experience with Active Directory, Microsoft Entra and other cloud platforms.
Experience with DevOps processes and tools, including exposure with Source Code Management (GitHub)

IAM

Have experience with HR processes (JML) and systems and authoritative source integration based on WorkDay, SuccessFactors, Beeline, and application integration such as AD, ServiceNow, SAP, etc.
Have experience with Java, BeanShell/JavaScript, JSP/Servlets
Have experience with web technologies: XML, SPML/SOAP. Web Services and App Services
Hands on experience of SailPoint, Saviynt, Okta, Microsoft or other IAM products
Knowledge of RBAC, SOD, etc.

PAM

Have experience of defining privileged access and the supporting the implementation of effective PAM processes
Have experience of account discovery, classification and onboarding of privileged accounts and access
Implementation and integration experience, working with other technical teams to perform the necessary configuration (firewall rules) and onboarding readiness activities
Hands on experience of CyberArk, BeyondTrust, Delina, Microsoft or other PAM products

Desired Skills and Qualifications

Demonstrable capability and vendor qualifications is advantageous.
IAM and/or PAM vendor Certifications
Zero trust and SASE knowledge
Cloud related certifications across AWS/GCP/Azure
Cloud IAM native experience across AWS/GCP/Azure
CISM / CISSP / CRISC / ISO 27001 LI/LA / CISA
Experience of core control frameworks, such as, NIST, SANS Top 20 CSC, ISO 27001, Privacy, NIS and CAF.

Behaviours

Flexibility in working hours (as per client requirement).
Ability to travel both nationwide and internationally (where required).
Ability to build strong, trust-based working relationships
High standards of work output
Strong and effective communicator
Desire to continually improve and learn new skills.
Self-motivating, innovative and creative

About the Company

NCC Group

Global cyber security and resilience provider

NCC Group provides cyber security and resilience services to organizations and governments around the world. It helps protect digital systems by offering a range of capabilities such as security testing, risk assessment, and resilience planning, backed by a global team of experts and supported by technology-enabled tools. The company’s approach combines human expertise with technical solutions to identify vulnerabilities, assess risk, and implement concrete steps to improve security and continuity. What sets NCC Group apart is its large, worldwide team and its emphasis on practical, end-to-end cyber resilience—working with clients from assessment through to implementation and ongoing assurance. The goal is to create a more secure digital future by helping customers manage cyber risk, reduce threats, and maintain business continuity at scale.

Company size: 1,001-5,000
Company stage: IPO
Headquarters: Manchester, United Kingdom
Founded: 1999

Recently Posted Jobs

Explore more opportunities at NCC Group

See more jobs