Security Engineer - Identity and Access Management (IAM)

About this role

About Allica Bank

Allica is the UK’s fastest growing company - and the fastest-growing financial technology (Fintech) firm ever. Our purpose is to help established SMEs, one of the last major underserved opportunities in Fintech.

Established SMEs are the backbone of local communities - representing over a third of our economy - yet have been largely neglected both by traditional high street banks and modern fintech providers.

Department Description

Security is a hands-on, delivery-focused team that helps Allica Bank move quickly while maintaining strong, proportionate, and effective security controls.

The team combines day-to-day operational support with continuous improvement, automation, control assurance, and stakeholder partnership across the bank.

We work closely with Technology, Engineering, Product and business teams to make security practical and effective, while ensuring our controls support the requirements of a regulated banking environment.

Role Description

- The purpose of this role is to strengthen Allica Bank's identity and access controls by making access easier to request, safer to approve and simpler to evidence. The role will combine day-to-day IAM operations with engineering, automation, and continuous improvement to reduce manual effort and improve the security and governance of identity services.

- The role sits within Security and focuses on Identity and Access Management, primarily across Microsoft Entra ID, Microsoft Entra Identity Governance, Azure identity, access management and security controls, with support for Google Cloud Platform IAM governance, engineering and automation as that capability develops.

- The successful candidate will contribute to the day-to-day running of IAM services, including access requests, joiner/mover/leaver activity, access reviews, privileged access, RBAC, application SSO, and application onboarding. Alongside BAU responsibilities, they will identify and deliver improvements to processes, controls, and automation.

- This is not a purely operational IAM role. The successful candidate will be expected to run IAM services, engineer improvements, automate repeatable work, strengthen controls and help mature identity services across the bank.

- Experience using automation and AI tools to improve processes, reduce manual effort and strengthen security controls is desirable.

- Success in this role will be measured through the quality and timeliness of IAM operations, stronger identity governance and evidence, improved automation, and reduced manual effort.

Principal Accountabilities

- Operate and maintain IAM services, including user lifecycle management, access requests, provisioning, deprovisioning and access changes across Microsoft Entra ID and integrated applications.

- Manage identity governance and access controls, including Role-Based Access Control (RBAC), least-privilege access, Conditional Access and Privileged Identity Management (PIM).

- Manage access reviews and certifications, including reviewer engagement, evidence collection, exception handling, remediation tracking and reporting.

- Onboard and integrate applications into the IAM/IGA platform, including SSO, SAML/OIDC, SCIM provisioning and secure authentication using Microsoft Entra ID.

- Support application and vendor onboarding from an IAM perspective, assessing authentication, provisioning, privileged access, logging, ownership and access review requirements.

- Maintain effective IAM controls and audit evidence, supporting internal and external audits and regulatory requirements.

- Identify and deliver improvements through automation, improved workflows, better request processes, clearer ownership and enhanced reporting, reducing manual effort and improving control effectiveness.

- Support identity-related issues and investigations, working with application owners, Technology, Security and other stakeholders to resolve access issues and manage associated risks.

- Maintain IAM documentation and operational standards, including process guides, access models, onboarding standards, control evidence, and runbooks.

- Support wider identity and cloud access services where needed, including Azure identity, access management and security controls, credential lifecycle management, and Google Cloud IAM governance, engineering and automation.

- Provide clear reporting to Security leadership, highlighting IAM risks, control status, work in progress, blockers, and remediation actions.

- Support related control and regulatory activities, including Risk Smart Indicators and Data Subject Access Requests, where IAM input or evidence is needed.

Personal Attributes & Experience

- Experience in Identity and Access Management, Security Operations, Cloud Security or technical operations, ideally within a regulated or control-focused environment.

- Good hands-on knowledge of Microsoft Entra ID and Azure identity, access management and security controls, including users, groups, Enterprise Applications, SSO, Conditional Access, Privileged Identity Management and access management controls.

- Understanding of IAM principles and controls, including least privilege, RBAC, privileged access, joiner/mover/leaver processes and segregation of duties.

- Experience supporting access reviews, remediation, audit evidence and operational controls, with strong attention to detail and follow-through.

- Comfortably balancing BAU operational work with hands-on engineering, including improving processes, writing or adapting scripts, documenting workflows and automating repeatable tasks.

- Able to work effectively with application owners, Technology, Security, suppliers and non-technical stakeholders to translate access requirements into practical and secure controls.

- Strong analytical and problem-solving skills, with the ability to investigate access issues, identify root causes, and recommend practical improvements.

- Clear written and v

Similar jobs

• Senior Security Engineer, Identity and Access Management (IAM) — K2spacecorporation · Los Angeles, CA
• Engineering Manager - Identity and Access Management (IAM) — Databricks · Mountain View, California
• Engineering Manager, Identity & Access Management (IAM) — Lambda · San Francisco Office (Fremont St)
• Identity & Access Management (IAM) Engineer — Toyota · Plano, Texas
• Security Engineer - IAM — SECU · Operations - Raleigh - Creedmoor Rd
• Senior Identity & Access Management (IAM) Engineer — Allstate · Remote
• Identity Access Management (IAM) Engineer – Identity Governance and Administration — Umusic · Nashville, Tennessee
• Identity & Access Management (IAM) Engineer III — Allegiantair · Las Vegas, NV