IAM Engineer

Identity and Access Management (IAM) Engineer
Location: Remote global
At Holland & Barrett, we are over a century old and yet a startup that has undergone
a radical digital transformation. Our expansion into a fully cloud-native organization
has created a complex ecosystem of internal, partner, and customer-facing
applications. We are seeking a hands-on Identity and Access Management (IAM)
Engineer to help build and operate our IAM program, ensuring secure and
appropriate access across our entire digital landscape.
The Ambition
Our primary goal is to establish centralized control and governance over all digital
identities. We aim to build a modern, scalable IAM framework from the ground up,
moving beyond basic access control to a mature model of identity governance. This
includes implementing robust controls for privileged access, enforcing multi-factor
authentication universally, ensuring strict segregation of duties, and embedding the
principle of least privilege into our culture. Our ambition is to create a seamless
access experience that enhances security without hindering business agility.
The Role
As an IAM Engineer, you will be a core technical contributor to our enterprise-wide
identity and access management program. You will be responsible for the hands-on
implementation, configuration, and maintenance of our IAM solutions. This role
requires a technical expert who can implement a comprehensive IAM framework that
covers everything from customer-facing applications to internal corporate systems
and privileged access to critical infrastructure. You will be a key technical resource
for all identity-related matters, working closely with the IAM Manager, security team,
and application owners.
What You'll Do
You will implement, configure, and maintain our IAM platform and associated tools.
You will integrate new and existing applications—including internal, partner-facing,
and customer-facing systems—into our centralized IAM solutions. You will configure
and manage controls for privileged access management (PAM), multi-factor
authentication (MFA), and segregation of duties (SoD). You will automate identity
lifecycle processes, including user provisioning, de-provisioning, and access
reviews. You will champion the principle of least privilege by implementing fine-
grained access controls. You will troubleshoot and resolve complex access-related
issues for all user populations. You will contribute to the technical design and
architecture of the IAM roadmap.
What You'll Bring
 Proven hands-on experience as an IAM Engineer or in a similar technical role.

 Technical expertise in implementing and managing modern IAM platforms and
tools (e.g., Okta, Azure AD, SailPoint, CyberArk).
 Strong experience with identity protocols such as SAML, OAuth, and OpenID
Connect (OIDC) and their implementation.
 Proficiency in scripting and automation (e.g., Python, PowerShell) to
streamline IAM processes.
 Experience with both enterprise (internal) and customer-facing (CIAM) identity
solutions.
 Excellent problem-solving skills and the ability to troubleshoot complex
technical issues.
 Strong communication and collaboration skills, with a proven ability to work
effectively in a team environment.
Why Holland & Barrett?
This is a unique greenfield opportunity to be a core contributor in building a modern
IAM program from the ground up. You will have the opportunity to work with the
latest IAM technologies and make a tangible impact on the security posture of a
globally recognized brand. We offer a competitive salary, a comprehensive benefits
package, and a flexible working environment. If you are a hands-on IAM professional
who is excited by the challenge of building a world-class program, we would love to
hear from you.