Identity and Access Management Analyst

Group Overview

The TP ICAP Group is a world leading provider of market infrastructure.

Our purpose is to provide clients with access to global financial and commodities markets, improving price discovery, liquidity, and distribution of data, through responsible and innovative solutions.

Through our people and technology, we connect clients to superior liquidity and data solutions.

The Group is home to a stable of premium brands. Collectively, TP ICAP is the largest interdealer broker in the world by revenue, the number one Energy &

Commodities broker in the world, the world’s leading provider of OTC data, and an award winning all-to-all trading platform.

Founded in London in 1866, the Group operates from more than 60 offices in 27 countries. We are 5,200 people strong. We work as one to achieve our vision of being the world’s most trusted, innovative, liquidity and data solutions specialist.

Role Overview

Information Security is seeking an experienced Identity and Access Management (IDAM) Engineer to design, implement, and enhance TP ICAP's identity, access management, and privileged access capabilities. The role is responsible for the engineering, integration, automation, and governance of identity services across on-premises, cloud, and SaaS environments, supporting strategic initiatives including Privileged Access Management (PAM), Identity Governance and Administration (IGA), Zero Standing Privilege (ZSP), and cloud entitlement management. Working closely with Security, Infrastructure, Cloud, Application Development, and Risk teams, the successful candidate will help ensure access is managed securely, efficiently, and in line with regulatory requirements.

Role Responsibilities

Access Operations

• Manage and review user provisioning, deprovisioning, and access changes for internal systems, SaaS apps, and cloud platforms (e.g. AWS).
• Maintain user and group roles in IAM tools (e.g. Delinea, AWS, CNAPP or similar).
• Design, implement and maintain identity and access management solutions across on-premises, cloud, and SaaS platforms.

Identity Governance

• Support periodic access reviews, certification campaigns, and policy enforcement.
• Help define and maintain role-based access controls (RBAC) and attribute-based access models.
• Assist in monitoring privileged access and enforcing just-in-time or least-privilege access.

Risk, Compliance & Reporting

• Support internal and external audits, maintain control evidence, and produce reporting and metrics relating to access governance, certification, and compliance activities.
• Support delivery of Identity Governance and Administration (IGA) capabilities.
• Provide technical support for internal audits, regulatory reviews, and security assessments.

Collaboration & Improvement

• Work closely with IT, Security, HR, and Cloud unit leaders to ensure smooth access onboarding and offboarding.
• Assist in incident response where access misuse or anomalies are involved
• Develop integrations, automation, reporting, and process improvements that enhance IAM services and operational efficiency
• Develop integrations, automation, reporting, and process improvements that enhance IAM services and operational efficiency. Provide third-line support for IAM-related incidents and contribute to strategic identity initiatives.

Privileged Access Management

• Design, implement and maintain Privileged Access Management controls across human and machine identities.
• Support privileged account onboarding, credential rotation, session management, and privileged access workflows.
• Implement and enhance Just-in-Time (JIT) and Zero Standing Privilege (ZSP) capabilities.
• Support cloud privileged access governance and entitlement management across AWS, Azure, and SaaS platforms.
• Monitor privileged access activity and investigate access-related security events.

Experience / Competences

Essential

• Experience with IAM platforms (e.g., Okta, Delinea, Idira etc.)
• Strong experience implementing and supporting Identity and Access Management technologies.
• Strong understanding of IAM concepts including SSO, MFA, Federation, RBAC, ABAC, Privileged Access Management, Identity Governance, JIT and Zero Standing Privilege.
• Experience with user lifecycle management and access provisioning processes
• Experience with AWS Identity and Access Management and cloud-native security controls.
• Knowledge of Information Security and risk standards and frameworks such as NIST 800-53, CIS benchmarks, OWASP, ISO-27001, SOC2 and COSO
• Experience supporting access reviews or control audits (e.g., SOC 2, ISO 27001)
• Extensive security engineering background
• Knowledge of scripting or automation (e.g., PowerShell, Python, APIs)
• Comfortable working across departments and documenting technical procedures

Desired

• A degree in Computer Science or related field desirable but not essential
• Prior experience in financial services is strongly preferred
• Experience working with cloud entitlement management and cloud security technologies.

Job Band & Level

• Professional / 5

Not The Perfect Fit?

Concerned that you may not meet the criteria precisely? At TP ICAP, we wholeheartedly believe in fostering inclusivity and cultivating a work environment where everyone can flourish, regardless of your personal or professional background. If you are enthusiastic about this role but find that your experience doesn't align perfectly with every aspect of the job description, we strongly encourage you to apply. You may be the ideal candidate for this position or another opportunity within our organisation. Our dedicated Talent Acquisition team is here to assist you in recognising how your unique skills and abilities can be a valuable contribution. Don't hesitate to take the leap and explore the possibilities. Your potential is what truly matters to us.

Company Statement

We know that the best innovation happens when diverse people with different perspectives and skills work together in an inclusive atmosphere. That's why we're building a culture where everyone plays a part in making people feel welcome, ready and willing to contribute. TP ICAP Accord - our Employee Network - is a central to this. As well as representing specific groups, TP ICAP Accord helps increase awareness, collaboration, shares best practice, and holds our firm to account for driving continuous cultural improvement.

Location

About Us

Connecting clients, communities and colleagues for sustainable growth

TP ICAP connects people, platforms, ideas, and insight across the world’s financial, energy and commodities markets. As a global leader in market infrastructure and data-led solutions, we enhance market access, increase efficiencies, and unlock possibilities.

Work with us

Joining TP ICAP puts you at the heart of markets that matter.

You’ll have the freedom to innovate and act on your initiative. We’ll train you and build your abilities in your specialist area, so that you can become an expert in your field. And all within a connected network that’s there to set you up for success.

More about us

TP ICAP Group is a collection of premium brands each with a distinct, client-focused offering. Underpinning and connecting these client-facing brands is the financial security, operational strength and know-how we have as a Group.

Connections are at the heart of what we do. We combine our people’s know-how with the latest technology to improve price discovery, trade execution and liquidity flow.

Connections create strength. Through them, we help our clients to manage risk, realise investment strategies and expand the scope for growth.

And connections act as a catalyst. Sparking richer solutions for our clients to break new ground, modernising markets for future performance, and creating dynamic careers for our people.

Our capacity to connect builds trust, supports communities and gives us the power to anticipate and respond to change, whatever direction the world takes. It’s what makes TP ICAP a mainstay in the global markets, now and in the future.

TP ICAP. We connect.