Lead IDAM Engineer

If you’re someone who enjoys modernising legacy platforms and improving security at scale, Standard Life could be the place for you. We’re looking for a Lead Identity and Access Management (IDAM) Engineer to join our Digital Engineering team. Job Type: Permanent Location: Hybrid in Birmingham, Telford, Edinburgh or London, with occasional travel to office locations as required. Flexible working: All roles are open to part-time, job-share and other types of flexibility. We will discuss what is important to you and balancing this with business requirements during the recruitment process. You can read more about flexible working here. Closing Date: 10/08/2026 Salary and benefits: £70,000-£85,000 depending on experience, plus an indicative bonus range of 8–16%, private medical cover, 38 days annual leave, excellent pension, 12x salary life assurance, career breaks, income protection, 3x volunteering days and much more. Who are we? We’re Standard Life, a retirement specialist focused entirely on retirement savings and income. We champion the belief that everyone’s journey to and through retirement can be better, and for more than 200 years, we’ve been helping our customers plan and prepare for their financial futures. Life today is increasingly complicated, uncertain and unpredictable. People move through different careers, face unexpected moments and navigate important choices. We offer our colleagues flexibility, trust and benefits that work for whatever life brings. In return we expect curiosity, connection, accountability and high standards. We make room for what matters - so you can bring your best, every day. The role As a Lead Identity and Access Management (IAM) Engineer, you will play a critical leadership role in modernising our identity platform, supporting the migration of our legacy on-premises ForgeRock AM solution to a cloud-based IAM service. You will lead a small team of internal IDAM engineers, providing technical direction, coaching and delivery oversight while ensuring the team can operate the platform safely, effectively and with increasing autonomy. You will also work closely with a strategic IAM vendor during the migration phase, helping to ensure successful delivery, knowledge transfer and alignment to our architecture, security and operational standards. Following migration, you will take a leading role in owning and evolving the IAM platform, managing ongoing change and ensuring it continues to meet the needs of our digital products. You will also act as the key internal interface with third-party managed service support, ensuring effective escalation, coordination and resolution for complex fourth-line support issues. A key aspect of the role is working closely with digital engineering teams to ensure identity services enable secure, resilient and high-performing customer journeys. Lead the migration of legacy ForgeRock AM to a cloud IAM platform, working alongside vendors, internal engineers and wider technology teams. Manage, coach and provide technical direction to a small team of internal IDAM engineers, helping them deliver safely and effectively across change and run activity. Act as the internal technical lead for IAM, ensuring solutions align to enterprise architecture, security and operational standards. Own and manage ongoing changes, enhancements and releases for the IAM platform post-migration. Collaborate with digital squads to integrate IAM into customer journeys, APIs and applications. Ensure authentication and authorisation patterns support resilience, security and performance requirements. Manage IAM configurations including SSO, MFA, federation and access policies. Monitor platform health, resolve incidents and contribute to service reliability, availability, performance and recoverability. Act as the primary interface with third-party managed service support for complex incidents, escalations, upgrades, roadmap alignment and fourth-line support. What are we looking for? Experience leading IAM or IDAM engineering teams, including providing technical direction, coaching and day-to-day delivery oversight. Strong experience working with IAM platforms, ideally including ForgeRock AM, PingOne Advanced Identity Cloud or comparable identity and access management technologies. Experience leading or supporting the migration and modernisation of legacy platforms, preferably to cloud-based solutions. Strong understanding of authentication and authorisation technologies such as OAuth2, passwordless authentication (FIDO2/WebAuthn), OIDC, SAML, MFA, SSO and federation. Experience working with third-party vendors or managed service providers, including escalation management, knowledge transfer and complex fourth-line support coordination. Ability to work closely with digital teams to deliver secure, resilient and well-integrated customer-facing services. We want to hire the whole version of you. We are committed to ensuring that everyone feels accepted and welcome applicants from all backgrounds. If your experience looks different from what we’ve advertised and you believe that you can bring value to the role, we’d love to hear from you. If you require any adjustments to the recruitment process, please let us know so we can help you to be at your best. We’re reviewing applications as they come in, so apply early to avoid missing out. Find out more about working at Standard Life Guide for Candidates: standardlifeplc.pagetiger.com/guideforcandidates #LI-GJ1 Find or get answers from our colleagues: www.standardlifeplc.com/careers/talk-to-us