Identity & Access Engineer

A newly created, permanent position has opened up in our growing IT Security team — we’re looking for a forward-thinking Identity and Access Engineer to help shape and maintain our access control landscape across the business.

This role is crucial in strengthening our security posture by leading the ongoing development of identity and access management (IAM) technologies, processes, and best practices. You’ll be central to how we protect, detect, and respond to security incidents across our organisation.

💻 About the Role

As an Identity and Access Engineer, you’ll take responsibility for designing, implementing, and supporting security controls related to user identity and access to our core systems. This includes everything from deploying IAM platforms to automating security processes, supporting audits, and advising on secure system integration.

You'll work with third parties, internal stakeholders, and cross-functional teams to deliver robust IAM services, while also championing a strong security culture across IT.

🔧 Key Responsibilities:

• Ensure availability and continuous improvement of all user access security controls
• Lead root cause analysis for issues such as control failure, misconfiguration, or degradation
• Support implementation and enhancement of IAM platforms (e.g., Active Directory, Okta, OneIdentity, Entra ID)
• Collaborate with internal stakeholders to balance security, usability, and business requirements
• Provide expert advice and tooling support for business projects involving access security
• Make technically sound, risk-based recommendations on priorities and improvements
• Carry out authorised changes to identity platform configurations and security tooling
• Maintain the schedule and governance for user access reviews and application onboarding
• Ensure all work meets audit, assurance, and internal compliance requirements
• Support Security Engineers and IT teams in resolving IAM-related support tickets
• Keep IAM documentation, processes, and integration frameworks current and effective

🧠 What you’ll bring

Experience & Technical Skills:

• Proven experience in identity and access management (IAM) in enterprise environments
• Hands-on experience with tools such as:
• Active Directory / Entra ID
• Okta
• OneIdentity (or similar platforms)
• Microsoft Azure
• Web Proxy / Web Security Gateways (e.g. Zscaler)
• Firewall technologies to support secure access models
• Strong understanding of user access models, federated identity, and security protocols
• Solid working knowledge of Microsoft Server/Desktop OS
• Experience supporting security audits, compliance checks, and user access reviews

Competencies & Behaviours:

• Technical Expertise – Strong grasp of IAM principles and platforms
• Problem Solver – Analytical and adaptable when approaching complex issues
• Strong Collaborator – Works well across technical and non-technical teams
• Effective Communicator – Able to translate technical language for any audience
• Detail-Oriented – Thorough in execution and documentation
• Security Champion – Promotes best practice and security-first thinking
• Leadership Potential – Influences process and fosters security awareness

Our most important asset is our people. We value a healthy work-life balance and currently offer a 35-hour work week with our hybrid approach enabling you to have a mix of office days and remote working.  

Your base location for this role will be our Head Office, Principality House, The Friary, Cardiff, CF10 3FA

We reserve the right to close this vacancy early should we receive a high volume of applications. 

If you have any questions in relation to this role, please contact the recruitment team at -recruitment@principality.co.uk

‘’We are passionate about creating an inclusive workplace where diversity is celebrated and where colleagues feel a sense of belonging’’ Daniel Priest, Inclusion Manager. But don’t just take our word for it, see what our colleagues say about working here too; Careers (principality.co.uk)