# Lead Cyber Security Engineer

**Company**: Bupa
**Location**: London, London
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: Competitive Salary
**Category**: Security
**Industry**: Healthcare

**Apply**: https://bupa.wd3.myworkdayjobs.com/en-US/EXT_CAREER/job/Angel-Court-London/IAM-Lead-Engineer_R1215795?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_869ca2eb-67b

## Description

We make health happen at Bupa, where we're committed to helping people live longer, healthier, happier lives. As our Lead Cyber Security Engineer, you will play a vital role in strengthening our security posture by leading the design, development, and operation of identity and access management technologies across Bupa Global, India, and UK.

**Key Responsibilities**

- Lead the design, configuration, integration, and support of Identity Governance & Administration (IGA), Privileged Access Management (PAM), and Electronic Identity Management (EIM) tools.

- Build custom workflows, connectors, and automation to support efficient access provisioning.

- Integrate IAM solutions with core applications, Active Directory, Entra ID, and cloud platforms.

- Troubleshoot IAM, access, authentication, and identity-related issues.

- Implement least-privilege access, zero-trust principles, and compliant access governance.

- Support audits and produce IAM evidence and reporting.

- Monitor platforms, respond to IAM-related incidents, and manage remediation.

- Identify opportunities for automation and orchestration using PowerShell, Python, and APIs.

- Collaborate with IT, Security, HR, and business teams to deliver solutions that balance strong controls with smooth user experience.

- Lead and develop a high-performing IAM engineering team.

- Promote a culture of innovation, continuous improvement, and security-first thinking.

**What We're Looking For**

- Experience designing and operating IGA/PAM/EIM technologies (CyberArk, SailPoint, BeyondTrust, Saviynt etc.).

- Strong understanding of identity technologies (SAML, OAuth, OpenID Connect, LDAP, Kerberos).

- Experience integrating IAM with cloud services (AWS, GCP) and on-prem systems.

- Hands-on experience with scripting (PowerShell, Python) and automation.

- Knowledge of Active Directory, Entra ID, MFA, SSO, federation, and identity lifecycle.

- Understanding of AI use cases in IAM.

- 7+ years in cybersecurity or identity roles, 5+ years in IAM engineering leadership.

- Experience in regulated environments and large-scale enterprises.

- Professional certifications such as CISSP, CISM, CISA, or IAM-specific qualifications.

- Strong communication skills and ability to explain technical concepts clearly.

**Benefits**

- Private medical insurance

- Enhanced pension scheme

- Annual bonus scheme

- 25 days holiday + bank holidays

- Hybrid working options

## Skills

### Required
- IGA
- PAM
- EIM
- PowerShell
- Python
- APIs
- SAML
- OAuth
- OpenID Connect
- LDAP
- Kerberos
- Active Directory
- Entra ID
- MFA
- SSO
- federation
- identity lifecycle

### Nice to have
- CyberArk
- SailPoint
- BeyondTrust
- Saviynt
- CISSP
- CISM
- CISA

---

Source: [Apply at bupa.wd3.myworkdayjobs.com](https://bupa.wd3.myworkdayjobs.com/en-US/EXT_CAREER/job/Angel-Court-London/IAM-Lead-Engineer_R1215795?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)