Senior IAM Engineer
About Allica Bank
Department Description
Role Description
- The Senior IAM Platform Engineer is responsible for designing, implementing, and operating identity and access management solutions that support both internal users and customer-facing platforms.
- This role combines
deep IAM expertise with a strong engineering mindset
capability combined with platform ownership
, ensuring IAM services are secure, reliable, and continuously improved through automation and DevOps practices.
- You will work closely with Engineering, Platform, and Information Security teams to integrate IAM capabilities into new and existing systems. This includes enabling modern authentication and authorisation patterns and ensuring IAM platforms are deployed and operated according to DevOps and cloud best practices.
- The role has
broad technical scope
. As well as building and improving IAM capabilities, you will help support and evolve the IAM platform itself, working with modern cloud infrastructure, automation, monitoring, and CI/CD pipelines.
- Demonstrate responsible and effective use of GenAI-assisted development tools (e.g. GitHub Copilot) to improve engineering productivity and quality.
- Success in this role is measured by the reliability and security of IAM services, the quality of integrations with engineering teams, and the ability to continuously improve identity capabilities that support the bank's growth.
IAM Platform Engineering
- Design, implement, and maintain secure IAM solutions supporting both
Customer IAM and Workforce IAM
.
- Configure and operate IAM platforms within the
Ping Identity suite
PingDirectory
PingFederate
.
- Develop and maintain authentication and authorisation integrations across internal systems and customer-facing platforms.
- Ensure IAM solutions are scalable, resilient, and aligned with modern engineering practices.
- Ensure IAM services meet high availability, resilience, and security standards required for critical banking systems.
Identity Architecture & Integration
- Work with engineering teams to integrate IAM capabilities into applications and services.
- Implement and support modern authentication protocols including
SAML, OAuth2, and OpenID Connect
.
- Contribute to identity architecture decisions and ensure solutions align with security, compliance, and platform standards.
- Help define patterns for secure identity integration across services and platforms.
- Design and support API-driven identity integrations across internal services and external platforms.
DevOps & Platform Support
- Build and operate IAM platforms using DevOps and infrastructure-as-code practices, enabling automated deployment, configuration, and scaling.
- Implement monitoring, logging, and alerting to maintain visibility and operational health of IAM systems.
- Participate in incident response and troubleshooting for IAM-related issues, providing
Tier-3 support
where necessary.
- Continuously improve the automation, deployment, and operational management of IAM infrastructure.
Identity Governance & Security
- Work with Information Security, Risk, and Compliance teams to support identity governance and access control processes.
- Contribute to IAM standards, policies, and best practices across the organisation.
- Support initiatives related to
access controls, identity lifecycle management, and audit requirements
.
- Help ensure identity solutions align with regulatory expectations and internal security frameworks.
Collaboration & Enablement
- Partner with Engineering, Platform, and Product teams to ensure IAM capabilities support new systems and services.
- Provide guidance and education to teams integrating with IAM platforms.
- Document architecture, integrations, and operational procedures to ensure knowledge sharing across teams.
- Contribute to the continuous improvement of IAM tooling, processes, and engineering practices.
Core Experience
- Strong experience working in
Identity and Access Management
Customer IAM and Workforce IAM
Strong hands-on experience with the Ping Identity platform,
PingDirectory
PingFederate,
including configuration, integration, and operational support in production environments.
- Experience integrating IAM capabilities into distributed systems, enterprise applications, and customer-facing digital platforms.
- Strong understanding of
authentication and authorisation standards
SAML, OAuth2, and OpenID Connect
.
- Experience working with
Active Directory and Azure Active Directory
Engineering & Technical Skills
- Strong analytical and problem-solving skills with an
engineering-led approach to troubleshooting and system design
.
- Experience integrating IAM platforms with applications and services.
- Familiarity with
DevOps practices
, CI/CD pipelines, and infrastructure automation.
- Experience working with
cloud platforms
Microsoft Azure
.
- Experience implementing monitoring, logging, and operational support for critical systems.
Collaboration & Communication
engineering, platform, security, and product teams
Desirable Experience
PingOne MFA
Privileged Access Management (PAM)
regulated environments
secure system design and threat modelling
Working at Allica Bank
At Allica Bank we want to ensure our employees have the right tools and environment in which to succeed in their role and in support of our customers. Our employees are at the heart of everything we do, so our benefits are designed with you in mind:
- Full onboarding support and continued development opportunities
- Options for flexible working
- Regular social activities
- Pension contributions
- Discretionary bonus scheme
- Private health cover
- Life assurance
- Family friendly policies including enhanced Maternity & Paternity leave
Don’t tick every box?
Flexible working
Diversity
Not included in the source posting: what you'll do, benefits.
Skills
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.