Senior Lead Associate - IAM

The IAM Level 3 Engineer serves as the senior technical authority responsible for the strategic evolution, optimisation, and governance of the organisation's Identity and Access Management ecosystem across on-premises and cloud platforms. Reporting to the IAM Service Owner, the role drives platform maturity, security enhancement, operational resilience, and technology modernisation initiatives across Active Directory, Microsoft Entra ID, hybrid identity services, privileged access management, authentication services, and certificate management platforms. The role provides technical leadership for the design, standardisation, and continuous improvement of identity services, ensuring IAM capabilities remain secure, scalable, compliant, and aligned with organisational security and business objectives. Through deep technical expertise and architectural understanding, the IAM Level 3 Engineer leads the resolution of complex identity challenges, eliminates systemic service issues, reduces technical risk, and enhances the effectiveness of identity governance and access control frameworks. Working closely with Cyber Security, Infrastructure, Architecture, Application, Risk, and Service Management teams, the role translates security, compliance, and business requirements into robust identity controls, technical standards, and sustainable operating practices. The IAM Level 3 Engineer is accountable for improving identity-service resilience, strengthening authentication and access governance capabilities, and driving automation, standardisation, and operational excellence across the IAM landscape. The position acts as a technical mentor and escalation point for IAM engineering teams, providing guidance on complex technical issues, platform optimisation opportunities, identity architecture decisions, and security best practices. In addition, the role provides technical assurance for major transformation initiatives, application integrations, compliance programmes, control implementations, and critical service events, ensuring solutions meet security, governance, and operational requirements. Success in the role is measured through improvements in identity security posture, access governance maturity, automation adoption, service reliability, operational efficiency, audit readiness, and the overall effectiveness of enterprise IAM capabilities rather than through routine operational administration or ticket-based support activities.