IAM Analyst

The Identity and Access Management team sits within Admiral’s IT department, ensuring timely, appropriate, and controlled access to our networks, systems, and applications across a hybrid on-premise/Cloud environment. This involves managing accounts through their lifecycle, from creation to de-provisioning and maintaining access in response to change.

The successful candidate will have strong IAM experience with the ability to focus on Governance and Risk controls, utilising their analytical and data management skills with a security-focused mindset. In addition, they can provide excellent customer service, prioritise a variable workload to meet deadlines, and be self-motivated and flexible in their approach to work, with great attention to detail. 

There are several projects underway across both IAM and PAM which will impact identity and access management, making it an exciting time to join the team as there will be the opportunity to contribute to the role and team’s development. 

This will be a fixed term contract for 12 months.

Job Purpose

• Working closely with the IAM Administrators, the core purpose of the role is to ensure compliance with Governance, InfoSec and regulatory requirements. 
• Ensure access to applications, systems and networks is appropriate and controlled for legitimate business reasons. 
• Drive continuous improvement of user access controls, standardising and automating (where possible) aspects of managing identities, saving time, and reducing risk. 
• Drive and maintain Role Based Access (RBAC) to allow users to access the information necessary to effectively perform their duties while maintaining the principle of least privilege.
• Engagement with IT Governance and IT Tribes for application onboarding, identifying IAM components and requirements.
• As a member of the wider IT Support team, support operational priorities and assist other teams across the department where required.

Main Duties

• Administration of Identity Services, including Active Directory, Azure AD, and Google Cloud Platform.
• Troubleshoot and manage identity-related issues, systems access, accounts, and permissions. 
• Review user access periodically to maintain compliance with Governance and Information Security standards and policies.
• Maintain the user access review schedule according to new or changing requirements, e.g. new applications being onboarded or new Security guidelines implemented. 
• Combine data from multiple sources (i.e. HR and IT applications) to produce the reports for managing user access controls.
• Work closely with audit teams to ensure that the methodology used in the IAM processes is robust and suitably evidenced.
• Support the implementation of new or improved access control processes.
• Responsible for documenting processes and procedures specific to the scope of responsibilities, ensuring document compliance with Quality Standards.
• Maintain and drive role-based access control.
• Assist other teams within IT to support operational requirements.
• Mentor and train junior team members in any aspects of IAM required.  
• Project engagement for new Applications/ systems, ensuring IAM requirements are considered and implemented.

Essential Requirements

• Previous experience working with Identity & Access Management (IAM/IDAM), ideally in a regulated environment such as the finance sector.
• Strong knowledge of identity management systems, including Active Directory, Azure Active Directory and Google Cloud Identity.
• Understanding Identity Access Management and PAM best practices, processes and controls, including recertification, toxic combinations, and role-based access control.
• Competent in using reporting tools and/or Excel, creating and manipulating large volumes of data.
• Good analysis and administration skills with excellent attention to detail.
• Excellent organisational skills with the ability to plan and prioritise work without supervision, managing workload effectively.
• Strong communicator with experience working with end users (including senior executives).
• A strong desire and focus on continuous improvements and personal development.
• Team player with the ability to work autonomously, flexibly and with enthusiasm.

Desirable

• Experience in the management of Privileged users through a Privileged Access Management (PAM) solution.
• Experience in using Windows PowerShell and creating scripts.

Our Commitment to You

At Admiral, we are committed to being a diverse and inclusive workplace. Admiral is proud to be an equal opportunities employer and does not discriminate on the basis of race, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), national origin, gender, gender identity, sexual orientation, disability, age, or any other legally protected status.

All qualified applicants will receive equal consideration for employment.

Salary, Benefits and Work-Life Balance

We do not have a set salary for this position, as it will be dependent on the successful candidate’s experience. We are happy to see CVs from all candidates who meet the requirements and will be happy to discuss the remuneration package.

At Admiral, we are proud to be a diverse business where we put our people and customers first. We have great benefits to ensure employees have a great work-life balance; it's one of the reasons we’re consistently voted one of the Sunday Times Best Big Companies to Work For in the UK. We want you to have an element of freedom to define a working lifestyle that supports this, so accommodate flexible hours wherever possible.

All colleagues will receive 33 days holiday (including banks holidays) when they join us, and this will increase with length of service, up to a maximum of 38 days (including banks holidays). You also have the option to buy or sell up to five days of annual leave in addition to your allocation.

You can also view some of our other key benefits here.

#LI-NT1