IAM Security Engineer

Salary: Competitive Plus Benefits
Location: Coventry Store Support Centre - Ansty Park and Home, Coventry, CV7 9RD
Contract type: Permanent
Business area: Sainsbury's Tech
Closing date: 05 March 2025
Requisition ID: 293202
We’d all like amazing work to do, and real work-life balance. That’s waiting for you at Sainsbury’s. Think about the scale it takes for us to feed the nation. The level of data, transactions and variety it involves. Then you’ll realise that ours is a modern software engineering environment because it has to be. We’ve made serious investment into a Tech Academy and into setting standards and principles. We iterate, learn, experiment and push ways of working such as Agile, Scrum and XP. So you can look forward to awesome opportunities in everything from AI to reusable tech.
The big question: why on earth should a Tech professional like you work for a 150-year-old retail chain? Because we’re on a journey. Changing the way, we operate. Learning to think nimble. Giving our teams the time and freedom, they need to push boundaries. To create amazing systems and technologies. To give our colleagues and our customers even more incredible experiences.
There are thousands of experts to talk to and learn from. We’ve got data from billions of transactions for our teams to play with. Things get built here. They get made here. They hit customers and colleagues quickly. Welcome to Sainsbury's Store Support Centre.
More about the role:
You'll work with various stakeholders across the business to help build a strong IAM Capability working with the Product Owners and Engineering Managers on the whole product lifecycle from ideation to delivery and in line with the organisation’s risk appetite and strategic direction.
- The Identity and Access Management (IAM) team look after a suite of security tooling - enhancing and developing them continually to fit the needs of the business.
- You will be working with tools including CyberArk and the Microsoft E5 Security portfolio of tools (Defender for Identity, Entra ID) within the product team and configure policies to deliver security as per product roadmaps.
- Work as part of an agile delivery/engineering team, providing input and conducting implementation/development tasks applicable to product portfolio.
- As a Security Engineer, you will be responsible for working with the Information Security Operations Centre and Product teams, including - Security Analysts, Product Managers, Engineering Managers and Security Architects to ensure that IT products are delivered securely, protecting colleague and customer data, and ensuring compliance with Information Security policies and standards.
- Review, create and document Information Security and Business processes to compliment technical expertise. Ensure the team’s products are meeting best practice.
- Identify areas of Information Security policies, procedures, standards, guidelines, architectural, and design documents that need to be developed.
What we are looking for:
- Must have hands-on engineering experience of Identity and Access management products including but not inclusive of Privileged Access Management (PAM), MFA, SSO and Password Manager.
- Must have a broad knowledge and understanding of IT concepts and architectures including Cloud, system administration and delivery of security tools.
- Must have experience configuring one or more of: CyberArk, Microsoft Entra ID, Purview.
- Would be desirable to have experience with cloud platforms and technologies (Azure, AWS, GCP).
- Understanding of frameworks and protocols like OAuth, SAML.
- Good to have experience as part of an agile team delivering on sprint goals.
- Other Information Security, CyberArk or Microsoft certifications/qualification desirable.
- Having knowledge or experience with integration and automation of security tools / processes with ServiceNow
- Recommend process improvements aligned with NIST and Information Security principles, best practice, risk reduction and operational efficiencies.
- Developing and documenting the workflow process around permission management.
- Developing and improving process documentation.
In return you’ll get:
- Colleague discount across the multi-brands – Sainsbury’s, Argos and Habitat
- Holiday allowance
- Bonus scheme
- Pension plan
- Special offers on holidays, retail vouchers and more
Flexible working and job share conversations are encouraged. Across our multi-brands, we’re proud to be an equal opportunities employer that champions a diverse and inclusive culture. If you’re reading this, even if you’re not 100% sure you’re there with your experience, we’d still love to hear from you.
We are committed to being a truly inclusive retailer, so you’ll be welcomed whoever you are and wherever you work. Around here, there’s always the chance to try something new - whether that’s as part of an evolving team or somewhere else across the business - and we take development seriously and promise to support you. We also recognise and celebrate colleagues when they go the extra mile and, where possible, offer flexible working. When you join our team, we’ll also offer you an amazing range of benefits. Here are some of them:
Starting off with colleague discount, you'll be able to get 10% off at Sainsbury's, Argos, TU and Habitat after 4 weeks. This increases to 15% off at Sainsbury’s every Friday and Saturday and 15% off at Argos every pay day. We've also got you covered for your future with our pensions scheme and life cover. You'll also be able to share in our success as you may be eligible for a performance-related bonus of up to 10% of salary, depending on how we perform.
Your wellbeing is important to us too. You'll receive an annual holiday allowance, and you can buy additional holiday. We also offer other benefits that will help your money go further such as season ticket loans, cycle to work scheme, health cash plans, pay advance (where you can access some of your pay before pay day) as well access to a great range of discounts from hundreds of other retailers. And if you ever need it there is also an employee assistance programme.
Moments that matter are as important to us as they are to you which is why we give up to 26 weeks’ pay for maternity or adoption leave and up to 4 weeks’ pay for paternity leave.
Please see www.sainsburys.jobs for a range of our benefits (note, length of service and eligibility criteria may apply).