Senior PAM & AI Engineer

Salary: £44,000 - 84,000 per year

Requirements:

• Proven experience applying Identity & Access Management (IAM) principles including Authentication, Authorisation, access control models (RBAC / ABAC / PBAC), identity lifecycle management (Joiners / Movers / Leavers) and Zero Trust.
• Hands-on experience designing or leading AI-driven initiatives within IAM or Cybersecurity.
• Strong ability to analyse identity telemetry (audit logs, sign-in logs, access data) and translate insights into actionable improvements.
• Extensive hands-on experience with Microsoft Entra ID (Azure AD), including users, groups (static & dynamic), roles, service principals, app registrations, directories, tenants, objects, attribute structures, Conditional Access policies, SSO (SAML & OIDC), Access Packages, MFA, passwordless authentication, identity governance activities, and MS and 3rd party Agentic AI agents governance and lifecycle management.
• Solid engineering experience in Privileged Access Management (PAM) such as CyberArk or StrongDM, including user and group management, OU design, Group Policy Objects (GPOs), hybrid identity integration (Azure AD Connect / Cloud Sync), password rotation policies, and service account types for on-premises and cloud use cases.
• Working knowledge of how privileges and account types are secured within different operating systems, databases, servers, and cloud resources.
• Experience working with Identity Governance tooling such as Saviynt, SailPoint, or similar products.
• Experience in securing access within cloud platforms and technologies such as Azure, AWS, and GCP.
• Ability to define AI use cases and requirements aligned to Agent identity governance, Agent lifecycle management, and effective risk reduction controls.
• Strong understanding of the identity threat landscape and how AI can be applied to detect and mitigate risks.
• Experience gathering high-level technical requirements, discussing them with stakeholders, breaking them into detailed requirements with timelines, and communicating them to engineers.
• Experience mentoring or coaching engineers, providing technical advice to the team, and contributing to team standards and best practices.
• Excellent communication and presentation skills, with the ability to convey complex issues and findings clearly and effectively.
• Strong technical mindset with the ability to analyse complex IAM, PAM, and AI challenges, make sound architectural and engineering decisions, and proactively remove technical or organisational blockers.
• Commitment to continuous learning and building strong, trusted relationships with technical teams, security partners, and business stakeholders.
• Experience using AI and machine learning concepts to analyse identity-related data such as sign-in logs, access patterns, and usage trends.
• Knowledge of AI-assisted automation use cases within IAM, including access or sign-in anomaly detection, risk-based access decisions, and intelligent access reviews or entitlement recommendations.
• Experience with Microsoft security and analytics tools such as Entra ID logs, Azure Monitor, Log Analytics, and Sentinel.
• Understanding of ethical AI and responsible AI use, especially in security-sensitive and personal data contexts.
• Familiarity with data governance, data quality, and information security principles, particularly where AI models consume identity data.
• Strong focus on security, governance, and continuous improvement.
• Relevant professional certifications, or active progress toward them, such as Microsoft Identity or Security certifications, Privileged Access Management certification, AI/data analytics certification, CISSP, CISM, or equivalent.

Responsibilities:

• Work with Engineering and Product Managers to deliver technical milestones in line with product and business strategy.
• Collaborate with IT, product teams, Security Operations Centre, Security Analysts, Security Architects, and end users to support IAM and PAM solutions and ensure secure delivery.
• Safeguard colleague and customer data through secure IAM and PAM practices.
• Define AI use cases and requirements aligned to Agent identity governance, Agent lifecycle management, and risk reduction controls.
• Analyse identity telemetry and identity-related data to identify insights and improvements.
• Translate high-level technical requirements into detailed delivery requirements and timelines.
• Provide technical advice, mentoring, and coaching to engineers.
• Contribute to team standards and best practices.
• Make architectural and engineering decisions to address complex IAM, PAM, and AI challenges.
• Proactively remove technical or organisational blockers to enable effective and timely delivery.
• Support secure access and governance across cloud platforms and technologies.
• Help detect and mitigate identity threats using AI and machine learning approaches.
• Communicate complex issues and findings clearly to technical and business stakeholders.

Technologies:

• Agentic AI
• AI
• AI Agents
• AWS
• Azure
• Cloud
• GCP
• IAM
• Support
• Machine Learning
• RBAC
• SAML
• Security
• XP
• Product Manager
• RPA
• Windows

More:

We are a truly inclusive retailer and welcome people whoever they are and wherever they work. We support development, encourage trying new things, recognise colleagues who go the extra mile, and offer flexible working where possible. You will join a modern software engineering environment with serious investment in our Tech Academy, standards and principles, and ways of working such as Agile, Scrum and XP. We offer a wide range of benefits including colleague discount at Sainsburys, Argos, TU and Habitat, pension and life cover, a performance-related bonus of up to 20%, holiday allowance with the option to buy more, season ticket loans, an interest-free car loan, cycle to work scheme, health cash plans, pay advance, discounts from other retailers, Employee Assistance Programme, private healthcare, and family leave benefits. We offer full-time opportunities and the scale, data, and variety of a business feeding the nation, with opportunities in AI and reusable tech.

last updated 37 week of 2026