Lead IDAM Engineer

If you’re someone who enjoys modernising legacy platforms and improving security at scale, Standard Life could be the place for you. We’re looking for a Lead Identity and Access Management (IDAM) Engineer to join our Digital Engineering team. 

We’re Standard Life, a retirement specialist focused entirely on retirement savings and income. We champion the belief that everyone’s journey to and through retirement can be better, and for more than 200 years, we’ve been helping our customers plan and prepare for their financial futures.

Life today is increasingly complicated, uncertain and unpredictable. People move through different careers, face unexpected moments and navigate important choices. We offer our colleagues flexibility, trust and benefits that work for whatever life brings. In return we expect curiosity, connection, accountability and high standards. We make room for what matters - so you can bring your best, every day. 

As a Lead Identity and Access Management (IAM) Engineer, you will play a critical leadership role in modernising our identity platform, supporting the migration of our legacy on-premises ForgeRock AM solution to a cloud-based IAM service. 

You will lead a small team of internal IDAM engineers, providing technical direction, coaching and delivery oversight while ensuring the team can operate the platform safely, effectively and with increasing autonomy. You will also work closely with a strategic IAM vendor during the migration phase, helping to ensure successful delivery, knowledge transfer and alignment to our architecture, security and operational standards. 

Following migration, you will take a leading role in owning and evolving the IAM platform, managing ongoing change and ensuring it continues to meet the needs of our digital products. You will also act as the key internal interface with third-party managed service support, ensuring effective escalation, coordination and resolution for complex fourth-line support issues. 

A key aspect of the role is working closely with digital engineering teams to ensure identity services enable secure, resilient and high-performing customer journeys.

• Lead the migration of legacy ForgeRock AM to a cloud IAM platform, working alongside vendors, internal engineers and wider technology teams.
• Manage, coach and provide technical direction to a small team of internal IDAM engineers, helping them deliver safely and effectively across change and run activity.
• Act as the internal technical lead for IAM, ensuring solutions align to enterprise architecture, security and operational standards.
• Own and manage ongoing changes, enhancements and releases for the IAM platform post-migration.
• Collaborate with digital squads to integrate IAM into customer journeys, APIs and applications.
• Ensure authentication and authorisation patterns support resilience, security and performance requirements.
• Manage IAM configurations including SSO, MFA, federation and access policies.
• Monitor platform health, resolve incidents and contribute to service reliability, availability, performance and recoverability.
• Act as the primary interface with third-party managed service support for complex incidents, escalations, upgrades, roadmap alignment and fourth-line support.

• Experience leading IAM or IDAM engineering teams, including providing technical direction, coaching and day-to-day delivery oversight.
• Strong experience working with IAM platforms, ideally including ForgeRock AM, PingOne Advanced Identity Cloud or comparable identity and access management technologies.
• Experience leading or supporting the migration and modernisation of legacy platforms, preferably to cloud-based solutions.
• Strong understanding of authentication and authorisation technologies such as OAuth2, passwordless authentication (FIDO2/WebAuthn), OIDC, SAML, MFA, SSO and federation.
• Experience working with third-party vendors or managed service providers, including escalation management, knowledge transfer and complex fourth-line support coordination.
• Ability to work closely with digital teams to deliver secure, resilient and well-integrated customer-facing services.

We are committed to ensuring that everyone feels accepted and welcome applicants from all backgrounds. If your experience looks different from what we’ve advertised and you believe that you can bring value to the role, we’d love to hear from you.  

If you require any adjustments to the recruitment process, please let us know so we can help you to be at your best.  

We’re reviewing applications as they come in, so apply early to avoid missing out.

Find out more about working at Standard Life

Guide for Candidates: standardlifeplc.pagetiger.com/guideforcandidates #LI-GJ1

Find or get answers from our colleagues: www.standardlifeplc.com/careers/talk-to-us