Rodeo
Get started

TESTQ Technologies

IAM Engineer

London
Posted about 19 hours ago
Sign up to applySee more jobs like this
Get notified of more jobs like this · No spam, ever

How your CV stacks up

1Upload CV
2Analyse CV
3Improve CV

Upload your CV to see how well it fits this job role

?%

Senior IAM Engineer

To support IAM service transition privileged access transformation and identity security improvements across Entra ID Active Directory CyberArk and ServiceNow

The role will drive operational handover strengthen access controls and improve governance across both human and nonhuman identities Capable of critical thinking constructively challenging ideas and working independently to a high standard

Key Responsibilities

IAM Service Transition Operations

  • Support handover of IAM BAU operations into a centralized IAM function
  • Define IAM service scope operating model and RACI across support teams
  • Drive transition planning resource onboarding and knowledge transfer
  • Create/update SOPs process documentation and operational runbooks
  • Configure and optimize ServiceNow groups workflows and ticket routing
  • Define and track IAM operational metrics KPIs and reporting

Privileged Access Management Entra PIM

  • Implement Just-In-Time JIT privileged access using Entra PIM
  • Migrate standing access to eligible role-based access via groups
  • Configure approval workflows and Tier-based access controls incl Tier 0
  • Implement and manage break-glass accounts with monitoring and controls
  • Support access recertification and removal of overpermissioned access
  • Define and manage Entra-only privileged account model and lifecycle
  • Build ServiceNow request workflows for privileged access requests

Conditional Access Transformation

  • Assess and baseline existing Conditional Access policies and risks
  • Redesign into a secure simplified and governed CA model
  • Enforce controls including
    • MFA phishing-resistant
    • compliant hybrid joined devices
    • risk-based access controls
  • Rationalize exceptions exclusions and service account access
  • Support testing phased rollout and governance model implementation

Reasons to use Rodeo

I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?

Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.

Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.

Start with a chat, not a search bar

Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.

P

Graduate Consultant — 2026 Scheme

PwC·London, UK
£35,000/yr

Why you're a good match

Strong

Your economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.

See breakdown
Save jobNot relevant
View details

It searches the market for you

Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.

Why you're a good match

You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.

See breakdown
Strong

Experience fit

Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.

See breakdown
Strong

Only hits

No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.

Identity Security Hygiene

  • Remediate weak AD passwords user service accounts
  • Implement automated user notification and forced reset mechanisms
  • Support non-production password risk remediation
  • Improve controls to prevent weak passwords going forward

CyberArk PAM Enhancements

  • Strengthen CyberArk policies and privileged session controls
  • Prevent direct access bypass of vaulted credentials
  • Enhance monitoring and logging for privileged access activity
  • Perform account discovery and improve vaulting coverage
  • Clean up orphaned invalid and leaver-related accounts and safes
  • Implement processes for ongoing CyberArk hygiene and lifecycle management

Service Accounts Non-Human Identities (NHI)

  • Review and secure AD service accounts remove unnecessary interactive login
  • Assess and govern NHI landscape gMSA certificates secrets etc
  • Improve credential storage ownership and lifecycle controls
  • Strengthen governance of
    • Service principals
    • Managed identities
    • Application registrations
  • Reduce dependency on shared secrets and unmanaged credentials

Emerging Identity Areas AI Workload Identities

  • Assess AI agents and automation workflows for identity risks
  • Review access models delegated permissions and data exposure
  • Recommend controls for secure and governed agentic access

Required Skills

  • Strong hands-on experience in IAM PAM engineering
  • Expertise in
    • Microsoft Entra ID Azure AD
    • PIM Privileged Identity Management
    • Conditional Access
    • Active Directory AD
  • Experience with CyberArk or equivalent PAM tools
  • Experience working with ServiceNow ITSM workflows request management
  • Good understanding of
    • JIT access least privilege
    • Tiered admin model Tier 0-1-2
    • Identity governance access reviews
    • Service accounts nonhuman identities

Get help with your application

Your very own career expert that helps elevate your application to the next level.

Get help applying for this job

Good to Have

  • Experience in IAM service transition setup
  • Exposure to audit compliance and recertification processes
  • Knowledge of OAuth certificates workload identity security
  • Relevant certifications SC-300 CyberArk CISSP etc

Experience

  • 6-10 years in IAM Cyber Security
  • Strong hands-on implementation experience required
  • IAM IGA Operations Analyst related activities

Responsibilities

  1. Perform routine PowerShell-based operational scripts for standard reporting data extraction and repeatable IAM housekeeping tasks as per approved runbooks
  2. Execute identity hygiene activities such as user group application and service principal cleanup based on predefined procedures and approval
  3. Support orphaned account identification and remediation activities by running standard reports and executing approved corrective actions
  4. Assist with removal or remediation of legacy authentication methods by executing predefined changes and remediation steps approved by IAM engineering or security team
  5. Provide operational support for SSO MFA and federation platforms including incident handling service requests monitoring and routine maintenance
  6. Implement pre-approved authentication and access control policies

Skills

  • Mandatory Skills: CYBERARK, IDAM - Microsoft Entra ID, IDAM - Microsoft Azure PIM, PAM
Trusted by 25,000+ job seekers

“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”

Jessica, London

Get help applying for this job

Skills

Microsoft Entra ID
CyberArk
Privileged Identity Management
Conditional Access
Active Directory
ServiceNow
IAM Service Transition
Privileged Access Management
Identity Governance
PowerShell
Non-Human Identities
Least Privilege
Tiered Admin Model
OAuth
SC-300
CISSP

Location

London, England, United Kingdom

Sign up to applySee more jobs like this