Ofgem
Principal IDAM Engineer

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
About the job
Successful candidates may be based in any of our office locations – Cardiff, Glasgow or London. We especially welcome applicants from Cardiff and Glasgow.
Hybrid working: 1 day per week in the office (20%)
Job summary
Across government, secure identity and access management is no longer a purely technical concern; it is fundamental to protecting organisational data, maintaining resilience and enabling secure, seamless access to services. As digital transformation accelerates and reliance on cloud-based platforms grows, strong Identity and Access Management (IDAM) capabilities are critical to ensuring that systems remain secure, compliant and fit for the future.
Ofgem is on a significant transformation journey. Within the Digital, Data and Security Services (DDSS) directorate, we are strengthening the foundations of our technology and security landscape, modernising infrastructure and enhancing access control across our technology estate. As part of this, we are developing a comprehensive IDAM capability that supports secure access, improves user experience and meets regulatory and compliance requirements.
As a Principal IDAM Engineer, you will play a central role in defining and delivering Ofgem’s identity and access management strategy. You will be responsible for shaping and implementing enterprise-wide IDAM solutions, ensuring that identity governance, access controls and lifecycle management processes are robust, scalable and aligned with industry standards.
This is a senior, technically focused role with leadership responsibility. You will work across architecture, infrastructure, security and delivery teams, translating business and regulatory requirements into secure, practical solutions. You will also provide leadership and mentoring within the team, strengthening capability and embedding best practice in identity and access management across the organisation.
Job description
You will be responsible for:
- Leading the development and implementation of Ofgem’s IDAM strategy, ensuring secure, compliant and efficient access to systems and data across the organisation.
- Establishing and enforcing identity governance frameworks, including policies, standards and controls aligned with industry best practices such as ISO 27001 and NIST.
- Designing and implementing access control models, including Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC), ensuring consistency and security across platforms.
- Overseeing user identity lifecycle management, including provisioning, deprovisioning and automated access workflows integrated with HR systems and enterprise directories.
- Implementing controls and monitoring mechanisms for privileged access, reducing risk and ensuring compliance with security requirements.
- Defining integration patterns for IDAM solutions across enterprise applications, cloud services and systems, ensuring interoperability and scalability.
- Leading technical delivery and ensuring that IDAM solutions are secure, robust and aligned with enterprise architecture principles.
- Engaging with senior stakeholders, translating business requirements into effective IDAM solutions and ensuring alignment with organisational goals.
- Mentoring and supporting engineers within the team, building capability and fostering a culture of collaboration, security awareness and continuous improvement.
- Staying abreast of emerging identity and security technologies, ensuring Ofgem adopts modern, effective approaches to identity management.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
We are looking for:
A credible, experienced and technically strong identity and access management professional who can lead at both a strategic and operational level. You will bring deep expertise in IDAM architecture and implementation, alongside the ability to operate effectively in a complex, evolving technology environment.
You may come from an infrastructure, security or architecture background, but you will demonstrate:
- Strong experience delivering enterprise-scale IDAM solutions and identity governance frameworks
- Experience implementing user lifecycle management, provisioning and access recertification processes
- Deep understanding of access control models, identity standards and security frameworks
- The ability to design and integrate IDAM solutions across complex environments, including cloud and on-premise systems
- Confidence engaging with senior stakeholders and translating requirements into scalable technical solutions
Relevant certification such as Microsoft Certified: Identity and Access Administrator Associate or Certified Identity and Access Manager (CIAM) is expected (or willingness to achieve).
Experience in government or regulated environments, and exposure to audit and compliance processes, would be advantageous.
This is an opportunity to play a key role in strengthening Ofgem’s security and technology foundations. You will shape how identity and access are managed across the organisation, ensuring that systems are secure, compliant and able to support Ofgem’s critical work at a time when the importance of digital resilience has never been greater.
Person specification
Essential Criteria


Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Lead initiatives to automate user provisioning and access recertification processes, integrating IAM solutions with HR systems and directories (Lead Criteria).
- Demonstrable experience in IAM architecture and enterprise-scale identity governance (Lead Criteria).
- Staying abreast of emerging IAM technologies and trends to enhance the organisation’s security posture.
- Establishment and enforcement of IAM policies and procedures, ensuring compliance with frameworks such as NIST SP 800-53, ISO/IEC 27001 or other relevant standards.
- Implement and enforce access control policies, including access enforcement, supervision, and review.
- User provisioning and lifecycle management.
- Experience preparing for and supporting internal and external audits related to access controls and IAM processes.
- Holds or can obtain the following certifications or equivalent:
- Microsoft Certified: Identity and Access Administrator Associate.
- Certified Identity and Access Manager (CIAM).
Desirable Criteria
- Experience establishing continuous monitoring mechanisms to detect and respond to unauthorised access attempts.
Behaviours
We'll assess you against these behaviours during the selection process:
- Making Effective Decisions
- Leadership
- Managing a Quality Service
Benefits
Alongside your salary of £63,443, OFGEM contributes £18,379 towards you being a member of the Civil Service Defined Benefit Pension scheme. [Find out what benefits a Civil Service Pension provides](opens in a new window).
Ofgem can offer you a comprehensive and competitive benefits package which includes; 30 days annual leave after 2 years; Excellent training and development opportunities; The opportunity to join the generous Civil Service pension which also includes a valuable range of benefits; hybrid working (currently 1 day a week in the office but this is kept under review), flexible working hours and family friendly policies. Plus lots of other benefits including clean and bright offices based centrally, engaged networks and teams and an opportunity to contribute to our ambitious and important targets of establishing a Net Zero energy system by 2050. This exciting blend of professional challenge and personal reward identifies career opportunities at Ofgem as something to get excited about.
Interested in this opportunity? You can register your interest via LinkedIn now. We’ll be in touch with suitable candidates to encourage you to apply when the role launches on Civil Service Jobs in the coming weeks, where you’ll need to submit your full application.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location