Senior Identity & Access Management Specialist

Overview

The Senior Identity and Access Management (IAM) Specialist will be based on a hybrid basis from our office in the centre of Leeds, so you’ll need to be within a commutable distance to allow you to be in the office each week.

The role holder will be responsible for the operational delivery, stability and ongoing optimisation of the enterprise identity platform. You’ll ensure that identity lifecycle management processes operate reliably across global regions, supporting SailPoint IdentityIQ governance workflows and identity provider integrations such as Okta and Microsoft Entra.

You will act as a bridge between IAM technical implementation and operational IAM/BAU operations, ensuring that IAM enhancements are transitioned into stable, supportable processes, with appropriate documentation, controls and operational readiness, whilst supporting operational leadership activities and providing delegated oversight where required, contributing to the development of future IAM leadership capability.

You’ll get the chance to follow your chosen career path anywhere in MUFG Pension & Market Services, joining a network of experienced, innovative and dedicated individuals across multiple teams and countries. There are numerous opportunities to learn new skills and develop in your career with the support you need to succeed.

Benefits

26 days annual leave, plus a wellbeing day and a volunteer day, bank holidays and the opportunity to buy up to 5 days’ extra each year

Parental leave and Gender Transition leave

Health, wellbeing and lifestyle rewards and discounts that can be tailored to support you and your family.

Everything from

Discounts on retail and socialising; Travel and technology; cycle2work scheme; A host of gym and fitness subscriptions

Appreciate programme

Employee recognition for colleagues demonstrating our values

Company Pension Scheme, Company funded Life Assurance and Private Medical Insurance

Employee Assistance Programme

Talent Referral Programme

Learning & Development – Development opportunities at your fingertips via self-paced learning and access to LinkedIn Learning

What you need

As with any role, we want to find the right person and we want to make sure you know it’s the right role for you too.

You will need

• 8 – 1o years demonstrable experience, with a minimum 3 – 5 years hands-on experience with SailPoint IdentityIQ
• A strong understanding of identity lifecycle management, provisioning and access governance
• Experience integrating IAM platforms with enterprise systems, for example Active Directory, Okta and Entra ID
• Strong experience working in regulated environments (financial services preferred)
• Demonstrated experience with API’s, connectors and modern integration patterns: REST, JSON, XML
• Strong problem-solving and troubleshooting capability
• An ability to work independently as well as part of a team
• Exceptional verbal and written communication skills, with an ability to build and maintain relationships with a variety of technical and non-technical stakeholders
• A structured and disciplined approach to documentation and operational control
• An ability to operate effectively in a complex, globally distributed environment whilst managing competing priorities in a high demand environment

Day to Day, you will

• Contribute to the continuous improvement of IAM lifecycle processes, with a focus on automation, stability and auditability
• Support the alignment of IAM operations with regulatory and audit requirements, for example JML, UAR and SoD
• Provide input into operational readiness for IAM platform changes and enhancements
• Own IAM operational issues through to resolution, including coordination across teams where required
• Maintain and enhance the SailPoint IdentityIQ platform, including provisioning workflows, rules, connectors and lifecycle management processes
• Support Joiner Mover Leaver JML automation to improve data quality, compliance and operational governance efficiency
• Troubleshoot IAM issues across SailPoint, Okta and Microsoft Entra, including provisioning failures, workflow errors and integration issues
• Support onboarding of applications into the IAM ecosystem using standard connectors and API’s
• Ensure all IAM changes are documented, tested and transitioned into BAU inline with change control processes
• Maintain operational runbooks, configuration, baselines and documentation
• Support operational continuity across regions, including awareness of time zone coverage and handover practices
• Provide day-to-day technical guidance and support to IAM team members, acting as a delegated point of contact for IAM operational matters where required
• Support the coordination of operational activities across IAM, including prioritisation and incident response
• Contribute to the onboarding and mentoring of new team members
• Support a culture of accountability, operational discipline and continuous improvement
• Support User Access Reviews (UAR), audit activities and evidence gathering

Ensure IAM processes are aligned with internal controls and regulatory requirements

• Monitor IAM platform performance, stability and control effectiveness, identifying and escalating risks relating to identity lifecycle management and data integrity

The above list of key accountabilities is not an exhaustive list and may change from time-to-time based on business needs.