IAM Engineer
Leicester, Leicestershire, United Kingdom
Next
Shop the latest women's, men's & children's fashion plus homeware, beauty, designer brands & more. Next day delivery & free returns available. Shop now!While you’ll have heard our name, there’s a lot you probably don’t know about NEXT. Like how we create most of our systems ourselves – whether it’s a website, mobile app or application. What’s more, we’re growing. Fast. And it’s the kind of growth and investment that is exciting for everyone in our business.
NEXT has made headlines for all the right reasons but you'll never catch us in a quandary over security. Retail is now one of the most targeted industry verticals in Cyber Security, we face a constantly changing threat landscape ranging from script kiddies to APT’s that are directly or indirectly targeting our software and data. We have a huge online presence and large retail estate which we have to protect against these threats and so it is important we have the people and technology to rise to this challenge.
About the role
Working as part of the Identity and Access Management Team, you will be responsible for supporting the Identity Governance and Access management for the Next business.
You will also be responsible for supporting the lifecycle of access and identity covering the full Joiners, Movers and Leavers processes. You will work continuously on our IGA processes to provide security and user experience enhancements.
There will be a requirement to support the GRC and Audit teams to ensure that the IAM processes and current access models meet compliance and regulatory requirements.
You will work closely with business users and stakeholders to remediate any issues and ensure the team remains effective as new applications or services are introduced.
The role will require participation in a shift rota and supporting out of hours work where required by the business.
Key Responsibilities
- Manage and maintain Next’s Identity Access Management solution and directory services
- Conduct periodic user reviews and re-certifications of access.
- Respond to any issues or incidents related to Identity and Access.
- Support Audit requirements to ensure compliance with policies and regulations
- Highlight areas of user awareness to be implemented into security awareness training.
- Assist with the development and implementation of IAM policies, procedures and guidelines.
- Create and maintain operational procedure, configuration and technical documentation.
- Highlight opportunities for continual improvements to enhance the end-user experience, increase technology value, and improve security posture.
- Work closely with key stakeholders to understand requirements and drive the design, development, and implementation of improvements to our IAM systems
- Maintain metrics and reporting to ensure the performance of our IGA controls and the health of our Identity Services.
- Monitor IAM systems and respond to any violations.
- Assist Incident Response team with the investigation and resolution of Security Incidents when required.
Criteria
Essential
- A keen interest in Information Technology and/or Cyber Security.
- Ability to effectively plan and prioritise workloads, and report on current progress.
- Solid and demonstrable understanding of the IAM cybersecurity landscape including identity stores, authentication / authorisation, PAM, MFA and IGA.
- Clear understanding of Microsoft Identity Services (eg. Active Directory, Entra).
- Solid understanding of Windows Operating Systems (eg. Policies, Access / Privilege models, Admin Account Requirements).
- A team player who is hardworking and self-motivated.
- Excellent attention to detail.
- Strong communication skills, both verbal and written.
- Understand and operate change management.
Desirable
- Project delivery experience.
- Familiarity with IGA technologies.
- Relevant industry recognised Microsoft Technology qualification.
- Understanding and experience of working for an eCommerce Retail company.
- Knowledge of scripting languages such as Powershell or Python.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Active Directory APT Compliance E-commerce Ecommerce Governance IAM Incident response PowerShell Python Scripting Windows
More jobs like this
Explore more career opportunities
Find even more open roles below ordered by popularity of job title or skills/products/technologies used.