IAM Engineer - CyberArk

At CGI, we help clients strengthen their cyber resilience through secure, scalable identity and access management solutions that protect critical systems and enable business transformation. As an IAM Engineer, you will play a key role in delivering privileged access and identity governance capabilities across complex hybrid environments, helping organisations adopt modern security models while improving operational efficiency and compliance. Working alongside experienced cyber professionals, you’ll have the opportunity to shape secure access strategies, contribute innovative ideas, and take ownership of high-impact solutions using leading technologies including CyberArk, Microsoft Entra, and cloud-based IAM platforms. CGI was recognised in the Sunday Times Best Places to Work List 2025 and has been named a UK ‘Best Employer’ by the Financial Times. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you’ll be part of an open, friendly community of experts. We’ll train and support you in taking your career wherever you want it to go. Due to the secure nature of the programme, you will need to hold UK Security Clearance or be eligible to go through this clearance. This is a hybrid position. Your future duties and responsibilities In this role, you will design, implement, and support privileged access and identity governance solutions that strengthen security across enterprise environments. You will work closely with security architects, infrastructure teams, and business stakeholders to deliver secure, scalable IAM capabilities that align with organisational and regulatory requirements. Leveraging your expertise in CyberArk and Microsoft Entra, you will help modernise access controls, improve identity lifecycle management, and support Zero Trust security initiatives. You will contribute to the delivery of innovative IAM solutions across hybrid and cloud environments, taking ownership of technical integrations, automation, and continuous improvement activities. CGI will support your professional growth through collaborative teams, access to leading technologies, and opportunities to work on impactful cyber security programmes. Candidate Profile Design & Deliver secure privileged access management solutions using CyberArk PAS, EPV, PSM, and Privileged CloudIntegrate & Enhance IAM capabilities across enterprise platforms and cloud servicesSupport & Optimise Microsoft Entra services including SSO, Conditional Access, and PIMDevelop & Automate IAM workflows and integrations using PowerShell and APIsImprove & Govern identity lifecycle processes including Joiner/Mover/Leaver workflows and access certificationsCollaborate & Advise on security architecture and modern access management strategiesContribute & Innovate within Zero Trust and cloud security transformation initiativesMonitor & Resolve IAM-related issues, ensuring secure and reliable service delivery Required Qualifications To Be Successful In This Role To succeed in this role, you should have strong hands-on experience delivering enterprise IAM and privileged access management solutions within complex IT environments. You will bring deep expertise in CyberArk technologies alongside a solid understanding of identity governance, cloud-based access controls, and modern security principles. Experience working with Microsoft Entra, IGA platforms, and automation tooling will be highly valuable, alongside a collaborative approach and the ability to contribute to secure, high-performing delivery teams. You should have strong hands-on experience with CyberArk PAS, EPV, and PSMProven experience with CyberArk Privileged Cloud including SIA and SCACyberArk Certified Delivery Engineer (CDE) certificationStrong understanding of IAM principles including RBAC, least privilege, and JML processesExperience integrating CyberArk with enterprise systems and applicationsExpertise in security architecture and IAM solution design within complex environmentsStrong experience with Microsoft Entra (Azure AD), including SSO, Conditional Access, and PIMExperience with IGA platforms such as SailPoint or SaviyntStrong scripting and automation capability using PowerShell and APIs Desirable Skills Knowledge of Zero Trust and modern access management modelsExperience across cloud platforms including Azure, AWS, and GCPBroader cyber security certifications such as CISSP or CCSP