<div class="earcuposdescription"><div class="earcuposdescriptiontitle">About the role:</div><div class="earcuposdescriptionnote"><p>At <strong data-start="258" data-end="279">Holland &amp; Barrett</strong>, we're over a century old — and building like a startup. Our shift to a <strong data-start="352" data-end="387">fully cloud-native organisation</strong> has created a rich mix of internal, partner, and customer-facing systems. To secure this at scale, we're building a <strong data-start="504" data-end="548">modern IAM capability from the ground up</strong> — and we're looking for a hands-on IAM Engineer to help bring it to life.</p><p data-start="646" data-end="920">This is a <strong data-start="656" data-end="691">greenfield IAM engineering role</strong> with real technical ownership. You'll help design, implement, and run identity services that go far beyond basic access control — focusing on governance, automation, and least-privilege access, without slowing the business down.</p><h4 data-start="922" data-end="936">The Role</h4><p data-start="937" data-end="1256">As an <strong data-start="943" data-end="959">IAM Engineer</strong>, you'll be a core technical contributor within our IAM function. You'll work hands-on with modern identity platforms, integrating applications, automating identity lifecycle processes, and strengthening controls across our entire digital estate — from workforce IAM to CIAM and privileged access.</p><p data-start="1258" data-end="1392">You'll collaborate closely with the IAM Manager, security teams, and application owners to make identity simple, secure, and scalable.</p><h4 data-start="1394" data-end="1412">What You'll Do</h4><ul data-start="1413" data-end="1901"><li data-start="1413" data-end="1484"><p data-start="1415" data-end="1484">Implement, configure, and operate our <strong data-start="1453" data-end="1482">IAM platforms and tooling</strong></p></li><li data-start="1485" data-end="1567"><p data-start="1487" data-end="1567">Integrate internal, partner, and customer-facing applications into central IAM</p></li><li data-start="1568" data-end="1641"><p data-start="1570" data-end="1641">Configure and manage <strong data-start="1591" data-end="1630">MFA, PAM, and segregation of duties</strong> controls</p></li><li data-start="1642" data-end="1723"><p data-start="1644" data-end="1723">Automate identity lifecycle processes (joiner, mover, leaver, access reviews)</p></li><li data-start="1724" data-end="1792"><p data-start="1726" data-end="1792">Enforce <strong data-start="1734" data-end="1753">least privilege</strong> through fine-grained access controls</p></li><li data-start="1793" data-end="1844"><p data-start="1795" data-end="1844">Troubleshoot complex identity and access issues</p></li><li data-start="1845" data-end="1901"><p data-start="1847" data-end="1901">Contribute to IAM architecture and technical roadmap</p></li></ul></div></div><div class="earcuposdescription"><div class="earcuposdescriptiontitle">Key requirements:</div><div class="earcuposdescriptionnote"><div class="flex flex-col text-sm pb-25"><article class="text-token-text-primary w-full focus:outline-none [--shadow-height:45px] has-data-writing-block:pointer-events-none has-data-writing-block:-mt-(--shadow-height) has-data-writing-block:pt-(--shadow-height) [&amp;:has([data-writing-block])>*]:pointer-events-auto scroll-mt-[calc(var(--header-height)+min(200px,max(70px,20svh)))]" dir="auto" tabindex="-1" data-turn-id="request-WEB:c6d68547-df40-47a9-be8e-5739a5936684-6" data-testid="conversation-turn-8" data-scroll-anchor="true" data-turn="assistant"><div class="text-base my-auto mx-auto pb-10 [--thread-content-margin:--spacing(4)] @w-sm/main:[--thread-content-margin:--spacing(6)] @w-lg/main:[--thread-content-margin:--spacing(16)] px-(--thread-content-margin)"><div class="[--thread-content-max-width:40rem] @w-lg/main:[--thread-content-max-width:48rem] mx-auto max-w-(--thread-content-max-width) flex-1 group/turn-messages focus-visible:outline-hidden relative flex w-full min-w-0 flex-col agent-turn" tabindex="-1"><div class="flex max-w-full flex-col grow"><div class="min-h-8 text-message relative flex w-full flex-col items-end gap-2 text-start break-words whitespace-normal [.text-message+&amp;]:mt-1" dir="auto" data-message-author-role="assistant" data-message-id="c8e9bad7-470c-43ce-814d-5b6e1e52dee5" data-message-model-slug="gpt-5-2"><div class="flex w-full flex-col gap-1 empty:hidden first:pt-[1px]"><div class="markdown prose dark:prose-invert w-full break-words light markdown-new-styling"><ul data-start="1925" data-end="2350"><li data-start="1925" data-end="1987"><p data-start="1927" data-end="1987">Hands-on experience as an <strong data-start="1953" data-end="1969">IAM Engineer</strong> or similar role</p></li><li data-start="1988" data-end="2072"><p data-start="1990" data-end="2072">Strong experience with platforms such as <strong data-start="2031" data-end="2070">Okta, Azure AD, SailPoint, CyberArk</strong></p></li><li data-start="2073" data-end="2142"><p data-start="2075" data-end="2142">Solid understanding of <strong data-start="2098" data-end="2140">SAML, OAuth, and OpenID Connect (OIDC)</strong></p></li><li data-start="2143" data-end="2226"><p data-start="2145" data-end="2226">Experience scripting and automating IAM processes (e.g. <strong data-start="2201" data-end="2223">Python, PowerShell</strong>)</p></li><li data-start="2227" data-end="2288"><p data-start="2229" data-end="2288">Exposure to both <strong data-start="2246" data-end="2273">enterprise IAM and CIAM</strong> environments</p></li><li data-start="2289" data-end="2350"><p data-start="2291" data-end="2350">Strong problem-solving skills and a collaborative mindset</p></li></ul><h4 data-start="2352" data-end="2378">Why Holland &amp; Barrett?</h4><ul data-start="2379" data-end="2614"><li data-start="2379" data-end="2448"><p data-start="2381" data-end="2448"><strong data-start="2381" data-end="2419">Build an IAM platform from scratch</strong> with real technical impact</p></li><li data-start="2449" data-end="2516"><p data-start="2451" data-end="2516">Work with modern identity tooling in a cloud-native environment</p></li><li data-start="2556" data-end="2614"><p data-start="2558" data-end="2614">A purpose-led business focused on health and wellbeing</p></li></ul><p data-start="2616" data-end="2734" data-is-last-node="" data-is-only-node="">If you're a hands-on IAM engineer who enjoys building secure, scalable identity platforms, we'd love to hear from you.</p></div></div></div></div><div class="z-0 flex min-h-[46px] justify-start">&nbsp;</div><div class="mt-3 w-full empty:hidden"><div class="text-center">&nbsp;</div></div></div></div></article></div><div class="pointer-events-none h-px w-px absolute bottom-0" aria-hidden="true" data-edge="true">&nbsp;</div></div></div><div class="earcuposdescription"><div class="earcuposdescriptiontitle">What we offer:</div><div class="earcuposdescriptionnote"><p><strong>What we offer:</strong></p><p><strong>Wellbeing &amp; Lifestyle Benefits</strong>&nbsp;</p><ul><li>Health Cash Plan&nbsp;&nbsp;</li><li>Life Assurance</li><li>Incentive Scheme - Based on company &amp; personal performance</li><li>Virtual GP&nbsp;</li><li>Private Medical care</li><li>FREE at-home blood test kit&nbsp;</li><li>Holiday Purchase option&nbsp;</li><li>Pension Contribution scheme</li><li>Access to ‘Wellhub' with gyms, studios and wellbeing apps&nbsp;</li></ul><p><strong>Discounts &amp; Savings</strong>&nbsp;</p><ul><li>25% Colleague Discount with FREE Standard Delivery&nbsp;</li><li>Exclusive Discounts from a wide range of partners&nbsp;</li><li>£/€50 Annual Product Allowance to spend in store&nbsp;</li></ul><p><strong>Learning &amp; Development</strong>&nbsp;</p><ul><li>Access to a variety of learning opportunities, including Level 2-5 Apprenticeships, Workshops and our Digital Learning Library&nbsp;</li><li>AND MORE!&nbsp;</li></ul></div></div><div class="earcuposdescription"><div class="earcu_posdescriptionnote"><p><span style="font-size: 11pt; font-family: 'open sans', sans-serif;"><em><span class="ui-provider a b c d e f g h i j k l m n o p q r s t u v w x y z ab ac ae af ag ah ai aj ak" dir="ltr"><span data-teams="true">Holland and Barrett is an equal opportunity employer. We welcome diverse perspectives and are committed to creating an inclusive environment for all colleagues. We understand that when our colleagues are listened to, respected and valued for who they are, we build an&nbsp;organisation&nbsp;with belonging at its heart – making health and wellness a way of life for everyone.</span></span></em></span></p><p><span style="font-family: 'open sans', sans-serif; font-size: 11pt;"><span class="ui-provider a b c d e f g h i j k l m n o p q r s t u v w x y z ab ac ae af ag ah ai aj ak" dir="ltr"><em>Holland &amp; Barrett </em><em>does not accept unsolicited resumes from search firms/recruiters. Please do not forward resumes to our job alias, employees, or any other company location. Holland &amp; Barrett is not and will not be responsible for any fees if a candidate submitted by a search firm/recruiter unless otherwise agreed with respect to specific open position(s).&nbsp;</em></span></span></p></div></div>