Senior Cyber Security IAM Analyst

At OneAdvanced, we develop and host multiple software products and manage a large technical infrastructure spanning Public Cloud, Private Cloud, and on-premise data centres. We are building an AI-first business, and we invest heavily in security and engineering to build, run, and protect our products and customer data with confidence.

This role sits within our Identity and Access Management (IAM) function and reports to the Director of IAM. It is central to a major investment for us: the design, build, and deployment of our next-generation Privileged Access Management (PAM) capability. Working closely with technical stakeholders across the CTO organisation, you will help select and implement a new PAM tool and the processes and controls that surround it — including how we secure privileged access for the non-human and agentic AI identities that increasingly run in our environment. As the capability matures, you will grow into the subject-matter expert who supports and governs privileged access across the company.

Privileged Access Management (primary focus)

• Help design, build out, and deploy our next-generation PAM capability, from tool selection through to production rollout.
• Partner with technical stakeholders across the CTO organisation to implement the new PAM tool and the supporting processes, standards, and controls.
• Extend privileged access controls to non-human and agentic AI identities, securing the credentials, secrets, and just-in-time access these workloads depend on.
• Execute and progressively automate core PAM operations, including credential rotation, privileged session monitoring, and vault hygiene.
• Grow into the subject-matter expert for PAM, helping to govern privileged access policy and standards and advising teams across the business.

Identity and Access Management Operations

• Implement and manage identity and access control systems across key strategic platforms, including Active Directory, LDAP, and Entra.
• Manage user accounts, groups, and permissions across the IAM system.
• Grant or deny day-to-day access requests based on user role and privilege, ensuring the right people have access to the right resources.
• Work with internal customers, business analysts, and application teams to understand and implement access requirements.
• Configure and enforce access policies and procedures.
• Monitor user activity across the IAM system and investigate anomalies.
• Collaborate with internal teams to deliver access control initiatives aligned with corporate security policy and compliance standards.
• Troubleshoot IAM-related issues and design effective solutions.
• Provide expert guidance on IAM tools, technologies, and best practice.
• Integrate IAM solutions seamlessly into the broader IT infrastructure.
• Support the operational lifecycle of non-human and agentic identities, including authentication, authorisation, monitoring, and de-provisioning.
• Support evaluation and adoption of IAM tooling and automation to reduce manual administration.
• Support IAM risk and control activities, including evidence gathering for internal and external audits (e.g. ISO 27001).
• Document IAM processes and procedures.

Identity Governance and Administration Support

• Run access certification campaigns, process joiner-mover-leaver requests, and remediate dormant or orphaned accounts.
• Maintain the entitlement catalogue and flag gaps or anomalies to IAM leadership.

Reporting and Continuous Improvement

• Develop, monitor, and report on IAM, PAM, and IGA metrics and KPIs, and prepare clear, concise status reports for management.
• Deliver IAM training and awareness sessions for technical and non-technical staff.
• Track emerging IAM tools and industry developments and raise relevant options with IAM leadership.
• Support identity-related projects end-to-end, working alongside the Director of IAM on strategic delivery.

Required Experience and Qualifications

• Minimum 6+ years of hands-on experience in Identity and Access Management, with strong, demonstrable Privileged Access Management (PAM) experience at its core.
• Deep, hands-on Privileged Access Management experience is essential — including vault administration, credential rotation, and privileged session management — ideally gained in modern cloud and agentic AI environments.
• Experience implementing or building out a PAM capability (tool selection, deployment, and process design) is highly advantageous, as is practical exposure to Identity Governance and Administration operations such as access certification campaigns.
• Bachelor’s degree in computer science, Information Technology, or a related field.
• Relevant certifications in Windows (Azure, Active Directory) and/or AWS are highly desirable.

Non-Technical Skills

• Strong understanding and ability to articulate the organisation's IAM strategy.
• Knowledge of IAM tools and the ability to recommend suitable operational approaches.
• Strong understanding of security concepts and how they apply to IAM.
• Excellent organisational skills with attention to detail.
• Strong analytical and problem-solving skills.
• Effective communication and project administration abilities.
• Ability to work independently and collaboratively as part of a team.
• Capability to develop and deliver training to diverse audiences.

Technical Skills

• Experience with directory services such as LDAP, Active Directory, and Entra.
• Knowledge of security protocols including SSH and TLS.
• Proficiency in scripting languages such as PowerShell, Python, or Ruby.
• Hands-on experience administering PAM tooling (e.g. CyberArk), including vaulting, credential rotation, and session monitoring; familiarity with secrets management for machine, service, and agentic AI identities is a plus.
• Hands-on experience with IGA tooling (e.g. SailPoint), including access certification campaigns and joiner-mover-leaver workflows.
• Familiarity with other IAM tools (e.g. Secret Server, Okta, Ping Identity).
• Familiarity with database concepts and relational databases such as Microsoft SQL Server.
• Comfortable working across multiple operating systems including Azure, Windows, Unix/Linux.

#LI-PB1

• Wellbeing focused – Our people are our greatest assets, and ensuring everyone feels their best self to come to work is integral. 
• Annual Leave – 20 days of annual leave, plus public holidays 
• Employee Assistance Programme – Free advice, support, and confidential counselling available 24/7.
• Personal Growth - Regardless of where you are at in your career, we’re committed to enabling your growth personally and professionally
  • Development Programmes – From Future Managers to Leadership Training, our development programmes help you get where you need to go
  • Online Learning Platform: SkillsHub! - Learning at your fingertips, anytime from anywhere. You can access our online library with relevant content for your career growth. 
• Life Insurance - 3x annual salary 
• Personal Accident Insurance - providing cover in the event of serious injury/illness.
• Performance Bonus – Our Group-wide bonus scheme enables you to reap the rewards of your success

At OneAdvanced, we are at the forefront of delivering sector-focused technology solutions that simplify complexity, drive meaningful progress, and help build a fairer, more inclusive society.

We’re much more than a software company. We deliver SaaS workflow applications and IT services that power organisations across Education, Government, Healthcare, Legal, Manufacturing, Housing, Retail, and more.

OneAdvanced is one of the UK’s largest business software and services companies. Based in Birmingham (The Mailbox), operating across the UK, Ireland, India, and Australia.

Our secure, scalable platform, including OneAdvanced AI, our private AI service for UK organisations, powers connectivity and innovation across critical sectors. Alongside our software are our IT services, including hosting, managed services, and application modernisation.

We strive to create an inclusive workplace that drives innovation and collaboration, championing diverse perspectives and ideas. Our Environmental, Social and Governance (ESG) strategy is embedded in everything we do, guiding us to create meaningful impact for our people, our customers and the planet.

Join us and become part of a team that’s powering the world of work and making a real difference.

Learn more at www.oneadvanced.com