Senior IDAM Engineer

Here at Standard Life, we guide millions of people through some of life’s biggest decisions. We’re searching for a Senior IDAM Engineer who will bring strong hands-on technical expertise to the migration of our legacy on-premises PingAM/DS platform to a modern cloud-based IAM solution, helping us deliver secure, resilient digital experiences.

Job Type: Permanent

Location: Hybrid in Birmingham, Telford, Edinburgh or London, with occasional travel to office locations as required.

Flexible working: All roles are open to part-time, job-share and other types of flexibility. We will discuss what is important to you and balancing this with business requirements during the recruitment process. You can read more about flexible working here.

Closing Date: 10/08/2026

Salary and benefits: £60,000 - £72,000 plus an indicative bonus range of 16-32%%, private medical cover, 38 days annual leave, excellent pension, 12x salary life assurance, career breaks, income protection, 3x volunteering days and much more.

Who are we?  

We’re Standard Life, a retirement specialist focused entirely on retirement savings and income. We champion the belief that everyone’s journey to and through retirement can be better, and for more than 200 years, we’ve been helping our customers plan and prepare for their financial futures.

Life today is increasingly complicated, uncertain and unpredictable. People move through different careers, face unexpected moments and navigate important choices. We offer our colleagues flexibility, trust and benefits that work for whatever life brings. In return we expect curiosity, connection, accountability and high standards. We make room for what matters - so you can bring your best, every day.

The role  

As a Senior Identity and Access Management (IDAM) Engineer, you will play an important hands-on role in modernising our identity platform, supporting the migration of our legacy on-premises ForgeRock AM solution to a cloud-based IAM service. 
You will work closely with the Lead IDAM Engineer, internal engineering teams and our strategic IAM vendor during the migration phase, helping to ensure successful delivery, knowledge transfer and alignment to our architecture, security and operational standards. Following migration, you will help own and evolve the IAM platform, managing changes, enhancements and releases while supporting reliable day-to-day operation. 
A key aspect of the role is working closely with digital engineering teams to ensure identity services enable secure, resilient and high-performing customer journeys. You will be expected to bring strong technical judgement, take ownership of complex work packages and contribute to coaching and knowledge-sharing across the team, without carrying formal line-management accountability.

• Support the migration of legacy ForgeRock AM to a cloud IAM platform, working alongside the Lead IDAM Engineer, vendors and internal teams.
• Act as a senior technical SME during migration, helping ensure solutions align to enterprise architecture, security and operational standards.
• Own and deliver changes, enhancements and releases for the IAM platform, escalating risks and dependencies where appropriate.
• Collaborate with digital squads to integrate IAM into customer journeys, APIs and applications.
• Ensure authentication and authorisation patterns support resilience, security and performance requirements.
• Manage IAM configurations including SSO, MFA, federation and access policies.
• Monitor platform health, resolve incidents and contribute to service reliability, availability, performance and recoverability.
• Work with vendors on issue resolution, upgrades, knowledge transfer and continuous improvement, supporting escalation of complex issues where needed.

What are we looking for?

• Strong hands-on experience working with IAM or IDAM platforms, ideally including ForgeRock AM, PingOne Advanced Identity Cloud or comparable identity and access management technologies.
• Experience supporting the migration or modernisation of legacy platforms, preferably to cloud-based solutions, with the ability to own defined work packages independently.
• Strong understanding of authentication and authorisation technologies such as OAuth2, passwordless authentication (FIDO2/WebAuthn), OIDC, SAML, MFA, SSO and federation.
• Experience collaborating with third-party vendors, delivery partners and internal engineering teams, including supporting incident resolution, knowledge transfer and technical delivery.
• Ability to mentor less experienced engineers, share knowledge and raise engineering standards, without requiring formal people-management experience.
• Ability to work closely with digital teams to deliver secure, resilient and well-integrated customer-facing services.

We want to hire the whole version of you.

We are committed to ensuring that everyone feels accepted and welcome applicants from all backgrounds. If your experience looks different from what we’ve advertised and you believe that you can bring value to the role, we’d love to hear from you.  

If you require any adjustments to the recruitment process, please let us know so we can help you to be at your best.  

We’re reviewing applications as they come in, so apply early to avoid missing out.

Find out more about working at Standard Life

Guide for Candidates: standardlifeplc.pagetiger.com/guideforcandidates #LI-GJ1

Find or get answers from our colleagues: www.standardlifeplc.com/careers/talk-to-us