IAM Analyst

As an IAM analyst you will play a critical role in the management and optimisation of Starling’s identity lifecycle and across a variety of SaaS and bespoke identity tooling. You will serve as a key liaison to the wider business, bridging the gap between high-level security requirements and practical, automated solutions.

Responsibilities

Independently run and contribute to Identity-related projects; Design and implement identity solutions across both a variety of SaaS and bespoke identity tooling; Collaborating with engineering and business stakeholders on Identity-related initiatives; Reviewing and analysing proposed technical solutions and business processes to identify appropriate security controls; Bridging the gap between complex business needs and technical execution by documenting clear, actionable identity requirements for engineering teams; Advising on remediation of security issues and processes to address root causes; Provide troubleshooting as well as disaster recovery planning and tests; Maintain identity and access operations for specific high risk systems; Develop processes, guidelines, and documentation for consumption by internal teams; Triage and management of IAM security events including, where necessary, participation in IAM security incident management; Maintenance of existing solutions, including operational improvements; Provide training, guidance and mentorship for other team members; Security administration and auditing of privileged systems access; Identification and quantification of relevant risks to Starling systems and processes in the context of Starling’s desired security posture; Integrating systems with identity provider for SSO; Configuring request and review policies in access governance system; Analysing roles and permissions in third-party services and mapping these to teams and job roles for birthright access; Helping end users with complex access issues; Defining standards and policies relating to identity and access management; Taking ownership of or contributing to projects to improve the bank's identity security posture; Research, design and implementation of new identity solutions, including automation

Requirements

Strong communication and interpersonal skills including the ability to explain complex security concepts to technical and non-technical audiences; Good understanding of identity concepts, including authentication protocols, Identity Lifecycle Management, Privileged Access Management, Role Based Access Control and Identity Governance; Understanding of risk management, including quantification and remediation; A genuine enthusiasm for identifying security problems and building solutions to them; Experience of design and delivery related to identity and access management platforms, such as Okta; Experience of design and delivery related to Identity Governance Systems, such as ConductorOne; Ability to write code (e.g. automating tasks using scripting languages such as Python); Understanding of authentication protocols (e.g. SAML, OIDC); Strong general cybersecurity domain knowledge, including cloud security (GCP, AWS); Experience of fulfilling a client facing security consulting role or business facing security role

Benefits

33 days holiday (including public holidays, which you can take when it works best for you); An extra day’s holiday for your birthday; Annual leave is increased with length of service, and you can choose to buy or sell up to five extra days off; 16 hours paid volunteering time a year; Salary sacrifice, company enhanced pension scheme; Life insurance at 4x your salary & group income protection; Private Medical Insurance with VitalityHealth including mental health support and cancer care; Partner benefits include discounts with Waitrose, Mr&Mrs Smith and Peloton; Generous family-friendly policies; Incentives refer a friend scheme; Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks; Access to initiatives like Cycle to Work, Salary Sacrificed Gym partnerships and Electric Vehicle (EV) leasing