DevOps Engineer

DevOps Engineer – Identity & Access Management (IAM)

The Opportunity

**Position Type:** Inside IR35 Contract

**Location:** South Yorkshire (Hybrid)

**Duration:** Multi-year transformation program engagement

We're seeking an experienced **DevOps Engineer with GCP expertise** to help design and operate enterprise Identity & Access Management (IAM) capabilities at scale. This is a key position in a multi-year transformation program modernizing how IAM is delivered across a global financial services organization.

You'll work at the intersection of infrastructure, security, and identity platforms—building CI/CD pipelines, infrastructure-as-code, and cloud-native IAM services that serve thousands of users and systems.

What You'll Do

Platform & Infrastructure

• Design, build, and maintain CI/CD pipelines for IAM components, policies, connectors, and microservices
• Develop and maintain Infrastructure-as-Code (Terraform) for deploying IAM infrastructure, identity policies, directories, and supporting platforms on GCP
• Ensure consistent, repeatable environments aligned with architectural standards
• Deploy IAM services on Kubernetes (GKE), cloud-native platforms, and serverless environments
• Manage containerization, certificates, secrets, and service mesh integrations for IAM workloads

Automation & Operations

• Develop scripts and automation for account lifecycle operations, access provisioning, and system integrations
• Enable automated testing, security scanning, and controlled deployments across DEV/TEST/PROD environments
• Implement continuous improvement to streamline IAM release processes and operational efficiency
• Support regional deployments, failover strategies, data residency requirements, and compliance across multiple jurisdictions
• Manage data pipelines for identity events (Kafka, Pub/Sub) and streaming infrastructure monitoring

Graph & Data Architecture

• Deploy and manage graph platform infrastructure (Neo4j) for identity relationship mapping and access analytics
• Implement graph database backups, recovery, disaster recovery, and observability (GDS/APOC)
• Integrate graph-based identity models with IAM provisioning and access decision workflows

Security & Governance

• Embed security into the build and deployment process (vulnerability scanning, secrets detection, code quality checks)
• Collaborate with security teams to ensure compliance with Zero Trust principles and IAM security policies
• Implement Privileged Access Management (PAM) controls and identity governance at scale
• Work with cybersecurity and compliance teams on architecture, integration requirements, and regulatory controls
• Create and maintain documentation for pipelines, IaC, deployment patterns, and operational processes

Collaboration

• Partner with IAM architects, security engineers, platform teams, and application owners on design and integration
• Support both cloud and on-premises IAM solutions
• Communicate complex architectural and operational concepts across technical and non-technical audiences
• Manage workload prioritization and engagement in Agile environments

What We're Looking For

Core Technical Skills (Must-Have)

• **GCP Infrastructure & Provisioning:** Hands-on experience with Terraform (core), GCP infrastructure, and policy-as-code. Ability to manage, maintain, and write infrastructure policies at scale.
• **Containerization & Kubernetes:** Docker, Kubernetes, Helm/Kustomize, and GKE operations. Experience deploying and managing containerized IAM services.
• **CI/CD Engineering:** Pipeline authoring, artifact management, testing automation, and deployment strategies. Experience with Cloud Build or equivalent.
• **DevSecOps & Platform Security:** Security scanning, secrets detection, vulnerability scanning, code quality checks, and compliance automation.
• **Release Engineering & Governance:** Release operations, change management, documentation, and release governance in regulated environments.

Essential Technical Skills

• **Data Pipelines & Streaming:** Kafka fundamentals, schema registry, streaming infrastructure, and monitoring. Experience with Pub/Sub or equivalent event streaming platforms.
• **Graph Platform Engineering:** Neo4j basics, backups, recovery, disaster recovery, GDS/APOC, and observability.
• **IAM & Identity Governance:** Understanding of authentication, authorization, elevated access, Privileged Access Management (PAM), and identity lifecycle management.
• **Network Security & Compliance:** Network security, conditional access, regional deployments, data residency, and compliance requirements across multiple jurisdictions.

Soft Skills

• Strong problem-solving and troubleshooting capabilities
• Ability to work collaboratively across security, engineering, and operations teams
• Excellent communication and documentation skills
• Self-motivated to learn and adapt to new technologies quickly
• Experience working in Agile/Scrum environments (Jira, Jira Service Desk, kanban)
• Comfortable working across multiple time zones and in culturally diverse, globally distributed teams
• Ability to handle the pace and complexity of large-scale enterprise environments
• Experience working at scale in global IT enterprises