Senior IAM Engineer (all genders)

Description

The company relies on identity and access management to secure access to its services and tools for tens of thousands of staff, partner businesses, contractors, customer care agents and logistics workers. The engineering challenge grows as the identity landscape becomes larger and more complex.

In this role you sit between software engineering and systems engineering. You will shape, build and run the IAM technology stack alongside a diverse team, covering identity governance, access lifecycle automation and platform integrations. Your work directly affects how the company manages and protects access at scale.

Responsibilities

• Run and improve a modern, cloud-native IAM platform so it stays reliable, secure and current as the identity landscape and business needs shift.
• Build, maintain and own end-to-end the integrations between the IAM platform and business applications, using native connectors, SCIM or custom APIs.
• Extend infrastructure-as-code tooling and write custom connectors for the gaps that SaaS vendors leave.
• Automate provisioning across the Joiner-Mover-Leaver lifecycle, reducing manual steps on the way to full automation for every integrated system.
• Create data pipelines for archiving, analytics and anomaly detection on identity and access data, turning IAM events into operational insight.
• Monitor the systems you own, define alerts, take part in on-call rotations and apply Site Reliability Engineering practices.
• Extend the end-to-end test framework, focusing on acceptance tests against live platform APIs to keep services and dependent business processes reliable.
• Advise internal stakeholders on cross-domain identity and access management practices, including access models, and turn their requirements into service improvements.

Requirements

• Hands-on engineering experience with an enterprise IAM or IGA platform such as Saviynt, SailPoint, Okta or a comparable product, including building integrations, connectors or extensions rather than only configuring workflows in a UI.
• Understanding of access governance, including Joiner-Mover-Leaver lifecycle management, access certifications and role management, and how these translate into platform logic and custom code.
• Strong software engineering skills in a compiled language, with Golang preferred, and experience writing production-grade code, CLIs, tooling extensions and automated tests.
• Working knowledge of SCIM, OIDC, OAuth2 and SAML, with hands-on experience implementing integrations using them.
• A DevOps mindset: you treat operations as an engineering problem, write infrastructure as code and are comfortable deploying and running services in the cloud.
• Ability to distil domain knowledge and work across system boundaries, turning ambiguous requirements into well-scoped, well-tested solutions.

Conditions

The company reduces bias in hiring by judging candidates on qualifications, skills and contributions, and accommodations are available on request throughout the hiring process.

Benefits

• 27 days of holiday a year to start for full-time employees, rising by 1 day per calendar year up to 30 days.
• 40% off fashion and beauty products sold and shipped by the company, 30% off products from the company's Lounge line, and discounts from external partners.
• Family support, including counselling and dedicated services for parents and carers.
• Company pension scheme.
• Employee shares programme.
• Health and wellbeing options, including Wellhub.
• Mental health support and coaching.
• Development through the training platform and peer-to-peer reviews twice a year.
• 2 paid volunteering days a year.
• Relocation assistance, subject to prior agreement.