IAM Security Engineer

The big question: why on earth should a Tech professional like you work for a 150-year-old retail chain? Because we’re on a journey. Changing the way, we operate.  Learning to think nimble. Giving our teams the time and freedom, they need to push boundaries. To create amazing systems and technologies. To give our colleagues and our customers even more incredible experiences.

There are thousands of experts to talk to and learn from. We’ve got data from billions of transactions for our teams to play with. Things get built here. They get made here. They hit customers and colleagues quickly. Welcome to Sainsbury's Store Support Centre.

More about the role:

You'll work with various stakeholders across the business to help build a strong IAM Capability working with the Product Owners and Engineering Managers on the whole product lifecycle from ideation to delivery and in line with the organisation’s risk appetite and strategic direction.

• The Identity and Access Management (IAM) team look after a suite of security tooling - enhancing and developing them continually to fit the needs of the business.
• You will be working with tools including CyberArk and the Microsoft E5 Security portfolio of tools (Defender for Identity, Entra ID) within the product team and configure policies to deliver security as per product roadmaps.
• Work as part of an agile delivery/engineering team, providing input and conducting implementation/development tasks applicable to product portfolio.
• As a Security Engineer, you will be responsible for working with the Information Security Operations Centre and Product teams, including - Security Analysts, Product Managers, Engineering Managers and Security Architects to ensure that IT products are delivered securely, protecting colleague and customer data, and ensuring compliance with Information Security policies and standards.
• Review, create and document Information Security and Business processes to compliment technical expertise. Ensure the team’s products are meeting best practice.
• Identify areas of Information Security policies, procedures, standards, guidelines, architectural, and design documents that need to be developed.

What we are looking for:

• Must have hands-on engineering experience of Identity and Access management products including but not inclusive of Privileged Access Management (PAM), MFA, SSO and Password Manager.
• Must have a broad knowledge and understanding of IT concepts and architectures including Cloud, system administration and delivery of security tools.
• Must have experience configuring one or more of: CyberArk, Microsoft Entra ID, Purview.
• Would be desirable to have experience with cloud platforms and technologies (Azure, AWS, GCP).
• Understanding of frameworks and protocols like OAuth, SAML.
• Good to have experience as part of an agile team delivering on sprint goals.
• Other Information Security, CyberArk or Microsoft certifications/qualification desirable.
• Having knowledge or experience with integration and automation of security tools / processes with ServiceNow
• Recommend process improvements aligned with NIST and Information Security principles, best practice, risk reduction and operational efficiencies.
• Developing and documenting the workflow process around permission management.
• Developing and improving process documentation.

In return you’ll get:

• Colleague discount across the multi-brands – Sainsbury’s, Argos and Habitat
• Holiday allowance
• Bonus scheme
• Pension plan
• Special offers on holidays, retail vouchers and more

Flexible working and job share conversations are encouraged. Across our multi-brands, we’re proud to be an equal opportunities employer that champions a diverse and inclusive culture. If you’re reading this, even if you’re not 100% sure you’re there with your experience, we’d still love to hear from you.