Location
London, London (Hybrid role based from Coventry office and home, with approximately one day per week in the office)

Hours
Full Time

Salary
£15 per day

About the Role
Join Sainsbury's as an Identity and Access Management (IAM) Engineer where you will work within a modern software engineering environment focused on delivering secure, scalable IAM solutions. You will collaborate with engineering, product, security, and IT teams to implement and enhance IAM capabilities aligned to the organisation’s roadmap. This role involves hands-on engineering with Microsoft Entra ID (Azure AD), Active Directory, and identity governance tools, alongside leveraging AI and analytics to improve identity security and governance. You will contribute to initiatives such as access control models, identity lifecycle management, AI-driven identity analytics, and zero trust principles. Sainsbury’s values continuous learning and innovation, offering opportunities to work with cutting-edge technologies including AI, Agile methodologies, and reusable tech components. The role supports a balanced work-life environment and is part of a company committed to inclusion, development, and wellbeing.

Experience
- Practical experience in Identity & Access Management principles including authentication, authorisation, access control models (RBAC, ABAC, PBAC), and identity lifecycle management (Joiners, Movers, Leavers)
- Working knowledge of AI-driven or data-led initiatives within IAM or cybersecurity
- Ability to analyse identity telemetry such as audit logs, sign-in logs, and access data to support investigations and identify trends
- Hands-on experience with Microsoft Entra ID (Azure AD) including user/group management, role assignments, service principals, application registrations, conditional access, SSPR, MFA, passwordless authentication, and identity governance activities
- Engineering experience with Active Directory including user/group management, OU structures, Group Policy Objects, LDAP basics, hybrid identity integration, and AD tiering concepts
- Experience with identity governance tools such as Saviynt, SailPoint, or similar
- Ability to define AI or identity analytics use cases related to governance, lifecycle management, and risk reduction
- Awareness of identity threat landscape and how analytics/AI can mitigate risks
- Proven ability to collaborate with engineering managers, product managers, stakeholders, and senior engineers
- Excellent communication and presentation skills
- Strong technical and delivery mindset with commitment to secure, scalable IAM solutions
- Commitment to continuous learning in identity, security, and AI developments

About you
- Understanding of AI and machine learning concepts applied to identity data analysis
- Awareness of AI-assisted automation use cases such as anomaly detection, risk-based access decisions, and intelligent access reviews
- Familiarity with Microsoft security and analytics tools (Entra ID logs, Azure Monitor, Log Analytics, Sentinel)
- Awareness of ethical AI and responsible AI use in security and personal data contexts
- Exposure to Privileged Access Management (PAM) solutions and role-based privileged access (hands-on experience beneficial but not essential)
- Understanding of data governance, data quality, and information security principles related to AI models consuming identity data
- Ability to work collaboratively across teams to support secure IAM delivery and protect data

Qualifications
- Relevant professional certifications or actively working towards them, such as Microsoft Identity or Security certifications, AI/data analytics certifications
- CISSP, CISM, or equivalent certifications are desirable
- Commitment to personal and professional development supported by the employer