IAM Security Engineer

Contract Role: IAM Security Engineer Contract Location: London/Belfast (Hybrid) Contract Duration: 6 months initially (with potential extension) Contract Start Date: Immediate Contract Classification: Inside IR35 Daily Rate breakdown Traditional Daily Rate: £450 Agreed Contract Rate (ACR): £346.95 Equivalent Annual Salary: £90,206 + £10,887 holiday pay Payroll provider: Rockford Payroll Info for Contingent Workers - Rockford Pay Overview This is an exciting opportunity to join a leading global Tier 1 financial institution undergoing a major transformation of its technology landscape. We are seeking experienced IAM Security Engineers to join a Tier 1 Global Bank, designing and implementing secure Identity & Access Management solutions across AWS and GCP cloud platforms. This role focuses on cloud security engineering, automation, Infrastructure as Code and secure software delivery. Key Responsibilities Collaborate with Security, Infrastructure, Engineering and Application teams to define and implement IAM roles and policies. Design and implement IAM security controls aligned with enterprise cloud security standards. Build automation and reusable libraries enabling self-service IAM provisioning. Deliver IAM solutions using CI/CD pipelines with automated testing and validation. Develop secure cloud-native IAM solutions across AWS and GCP. Develop and secure REST and SOAP APIs. Contribute to DevOps and Agile delivery practices. Essential Skills & Experience Minimum 6 years’ IT experience, including at least 4 years within Cyber Security/Information Security. Minimum 3 years’ hands-on experience with AWS and/or GCP cloud-native services. Experience designing enterprise security solutions within Financial Services or other complex global organisations. Strong knowledge of cloud IAM security models. Experience using Infrastructure as Code tools including Terraform and CloudFormation. Demonstrated expertise in Threat Modelling methodologies such as STRIDE, PASTA or MITRE ATT&CK/ATLAS. Strong understanding of authentication, authorisation, encryption, logging & monitoring, infrastructure security and network segmentation. Ability to design and review secure technical architectures. Strong understanding of SDLC and CI/CD pipelines. Hands-on Python coding experience (Java or Go also considered). Experience with automated testing frameworks such as PyTest, Behave or JUnit. Experience developing secure REST and SOAP web services. Qualifications: Associate or Professional AWS or GCP Cloud Certification (mandatory). Associate or Professional Cyber Security Certification (mandatory). Excellent communication and stakeholder management. Strong analytical and problem-solving skills. Self-starter with the ability to work independently. Experience working within Agile and DevOps environments. CISSP, AWS Security Specialty or Google Professional Cloud Security Engineer desirable.