How your CV stacks up
Upload your CV to see how well it fits this job role
?%
IAM Engineer
IAM Engineer – London
Flexible working policy – Enjoy a healthy work-life balance with in-office presence on Tuesdays & Thursdays, while collaborating with global peers based in Belfast, Chicago, and Bangalore.
About the Role
Being an IAM Engineer at iManage means you are iManage’s identity authority, owning the infrastructure that governs authentication and access across a global, Microsoft-centric environment.
You will focus primarily on:
- Entra ID
- SSO integrations for SaaS applications
- IAM automation
With secondary responsibility for supporting network infrastructure and driving a distributed Infrastructure team.
Responsibilities
IAM Infrastructure & Security
- Own and manage identity federation, Single Sign-On (SSO), directory services (Active Directory/Dayforce), and Privileged Access Management (PAM) via CyberArk.
- Design & maintain SSO integrations for SaaS apps using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM.
Entra ID Administration
- Administer Entra ID as the primary identity provider, including:
- User lifecycle management (provisioning, deprovisioning, access reviews)
- Group management & app registrations
- Conditional Access policies
- Configure & maintain Entra ID components such as:
- Privileged Identity Management (PIM)
- Identity Protection
- Entitlement management
- Access reviews
Automated & Zero-Trust Controls
- Automate user lifecycle management via PowerShell, Microsoft Graph API, and Entra ID Governance.
- Enforce zero-trust principles, least-privilege access, and Role-Based Access Control (RBAC) policies.
- Monitor sign-ins for risky users/alerts and remediate incidents per internal SLAs.
- Manage Multi-Factor Authentication (MFA) policies, including:
- Conditional Access controls
- Exception handling
- Authentication method fulfilment
Service Account Governance
- Govern service account lifecycle including:
- Creation standards
- CyberArk vaulting
- Credential rotation
- Decommissioning
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Policy, Incident Response & Documentation
- Maintain documentation for IAM configurations, access policies, runbooks, and Standard Operating Procedures (SOPs).
- Lead IAM incident response, including root cause analysis and preventive controls.
- Detect & remediate stale accounts using Dayforce and Active Directory lifecycle signals.
- Support hybrid automation with Dayforce (JML) for timely employee lifecycle access changes.
- Manage break-glass accounts, ensuring regular reviews, audit logging, and alerting.
Global On-Call & Maintenance Support
- Provide on-call support for identity incidents.
- Participate in scheduled IAM maintenance windows.
Requirements
Technical Expertise
✔ 5+ years in infrastructure or systems engineering, with a focus on identity and access management. ✔ Deep hands-on experience with:
- Microsoft Entra ID (Conditional Access, PIM, Identity Protection, entitlements, access reviews)
- SSO integrations using SAML 2.0, OAuth 2.0, OIDC, SCIM ✔ Strong automation skills (PowerShell & Microsoft Graph API); Python/Bash a plus. ✔ PAM knowledge (preferably CyberArk experience). ✔ Microsoft 365 E5 security tools:
- Defender for Identity
- Microsoft Sentinel
- Microsoft Purview ✔ Networking fundamentals (TCP/IP, DNS, DHCP, VPN, firewall basics).
- (Palo Alto techniques preferred but not required).
Soft Skills & Collaboration
✔ Strong technical clarity—ability to explain complexity to both engineering peers and non-technical stakeholders. ✔ Collaborative approach to global teamwork (London-based role with colleagues in Belfast, Chicago, and Bangalore).
Why Apply if You Don’t Meet Every Requirement?
iManage is committed to building an inclusive, diverse environment. Studies show that women and underrepresented groups are less likely to apply if they don’t meet all criteria.
You are encouraged to apply if you strongly align with the role and have a growth mindset.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
What You’ll Get at iManage
Career Development
- Own your career path with an internal development framework.
- Unlimited access to LinkedIn Learning & interactive Microsoft courses + certifications.
- Work in a fast-moving, global SaaS leader with meaningful challenges.
Workplace Culture
- Modern, open-plan workspace in London.
- Flexible work hours for a strong work-life balance.
- A supportive, dynamic team that spans Europe, North America, and Asia.
Benefits Package
✅ Market-leading salary (reviewed against industry benchmarks). ✅ Annual performance-based bonus. ✅ 20 weeks paid parental leave (primary caregiver) + 10 weeks (secondary caregiver). ✅ 6% pension match. ✅ BUPA private medical insurance & SimplyHealth cash plan. ✅ Group life cover (including life insurance, income protection, critical illness). ✅ 25 days company leave + flexible additional time off. ✅ Wellness days for mental health & well-being support.
About iManage
Founded with the mission "Making Knowledge Work™", iManage helps 4,000+ customers worldwide secure, manage, and unlock business knowledge—handling 11B+ documents and 11 petabytes of data.
Our team thrives on solving challenging, high-impact problems. We’re looking for people who embrace challenges and push boundaries—collaborating with the world’s best talent. Together, we turn ambition into measurable results.
Diversity & Equality Commitment
iManage is an equal opportunity employer. We celebrate diversity and prohibit discrimination/ harassment based on:
- Race, color, religion, age
- Sex, national origin, disability status, genetics
- Military status, sexual orientation, gender identity/expression
More at www.imanage.com | Recruitment Privacy Policy available upon request.
For concerns about recruitment communications, email: recruitment@imanage.com. All legitimate correspondence will use the @imanage.com domain.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location