Principal - IAM Lifecycle Management

Job description

GSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver £40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally. Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems. Our diverse portfolio consists of vaccines, specialty medicines, and general medicines. Through continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges. Job Purpose: The Principal, IAM Lifecycle Management will drive the design, engineering and delivery of enterprise identity and account lifecycle capabilities and act as the senior technical authority for the capability. This senior individual contributor role translates business, security, architecture and regulatory requirements into scalable lifecycle controls, automation and integrations across cloud, on-premises and SaaS environments. The role owns complex implementations, establishes reusable engineering practices and guides technical delivery across joiner, mover, leaver, rehire, contractor, partner and non-human identity scenarios. About the team: IAM Lifecycle Management owns the identity and account lifecycle end to end. The team ensures that workforce, contractor, partner and non-human identities receive appropriate access when created, joining, moving, changing status or returning, and that access is suspended or removed promptly when no longer required. It improves lifecycle automation, identity-data quality, governance controls and service reliability across on-premises, cloud and SaaS systems. Key responsibilities: This role will provide you the opportunity to take ownership of key activities to progress your career. These responsibilities include some of the following: Own complex IAM lifecycle workstreams from discovery and requirements analysis through solution design, configuration, testing, deployment and operational transition. Act as the senior technical subject matter expert for IAM Lifecycle Management, advising product, architecture, engineering, security, risk, audit and business stakeholders. Mentor engineers, review solution designs and code, and establish reusable patterns, standards, documentation and engineering practices. Design and deliver end-to-end identity and account lifecycle capabilities, including creation, provisioning, modification, suspension, recertification and deprovisioning across on-premises, cloud and SaaS systems. Drive joiner, mover, leaver, rehire, contractor, partner and non-human identity lifecycle scenarios, including trigger events, approval orchestration, account states, exception handling and recovery controls. Drive complex application onboarding initiatives and integrations between authoritative HR and identity sources, directories, IGA platforms and target applications using connectors, APIs and event-driven services. Implement and improve governance controls for least privilege, segregation of duties, birthright and role-based access, account ownership, orphan-account prevention, access reviews and policy compliance. Drive improvements in identity correlation, reconciliation, source-data quality, reporting, monitoring, observability and engineering telemetry to improve lifecycle accuracy and service reliability. Own root-cause analysis and resolution of complex lifecycle defects, control failures, production incidents and cross-platform integration issues. Contribute technical insight to product roadmaps, technology assessments and delivery planning, identifying dependencies, risks and opportunities for automation, resilience and user-experience improvement. Promote secure engineering, automated testing, CI/CD, API governance, accessibility, performance optimisation, observability and controlled deployment practices. Ensure IAM processes, implementation evidence and control operation meet regulatory, audit and risk-management requirements, including those of highly regulated environments. Basic Qualifications: Bachelor’s degree in Computer Science, Information Technology or a related discipline, or equivalent practical experience. Ten or more years of relevant IAM experience, including significant hands-on engineering and technical ownership of complex identity and account lifecycle implementations. Strong implementation experience with an enterprise Identity Governance and Administration platform such as SailPoint, Saviynt, LINX or an equivalent product. Proven experience designing and delivering lifecycle solutions for joiner, mover, leaver, rehire, employee, contractor, partner and non-human identity scenarios. Deep understanding of provisioning and deprovisioning workflows, approval orchestration, birthright and role-based access, account-state transitions, exception handling and policy enforcement. Strong knowledge of identity data models, account correlation, reconciliation, access reviews, certification, segregation of duties, orphan-account prevention and audit evidence. Experience integrating IAM platforms with HR systems, Active Directory, Microsoft Entra ID, LDAP, databases, SaaS platforms and custom applications. Strong engineering capability with REST APIs, JSON, SQL, scripting and secure event-driven integration patterns, with the ability to troubleshoot transactions across connected systems. Experience owning application onboarding and complex cross-functional technical delivery from design through testing, deployment and operational handover. Experience delivering secure, observable and resilient IAM services using automated testing, Git-based version control and CI/CD pipelines such as GitHub or Azure DevOps. Strong troubleshooting and root-cause analysis skills across distributed IAM services, integrations, workflows and data flows. Ability to mentor engineers and communicate complex technical concepts clearly to engineering, product, business, risk and audit stakeholders. Preferred Qualifications: Advanced implementation experience with a SaaS-based identity security or leading IGA platform, including workflow, connector and policy configuration. Experience modernising or migrating legacy or bespoke lifecycle solutions to a SaaS IGA platform. Experience designing serverless, containerised or event-driven integration services in Microsoft Azure. Hands-on experience with GraphQL, TypeScript, Node.js, Next.js, NestJS, Apollo, .NET or API federation where these support IAM integration, administration and self-service experiences. Experience applying API-first, microfrontend, reusable component, secure coding and automated testing practices in enterprise applications. Experience with policy-as-code, identity analytics, automated testing and engineering telemetry for IAM capabilities. Experience applying AI or analytics to identity-data quality, access recommendations, anomaly detection or governance improvement, and knowledge of identity controls for AI agents and other non-human identities. Experience with control frameworks such as SOX and GxP and producing evidence suitable for regulated environments. Relevant IAM, cloud or security certification, such as CISSP, SailPoint, Saviynt, CIMP or Microsoft Azure. Experience working in a central IT or cyber security team within pharmaceuticals, healthcare, financial services or another highly regulated industry. Typical tools and technologies: SailPoint, Saviynt, LINX, Active Directory, Microsoft Entra ID, LDAP, HR source systems, Next.js, NestJS, Apollo GraphQL, TypeScript, Node.js, .NET, REST and SOAP APIs, Microsoft Graph, JSON, SQL, Azure integration services, GitHub and Azure DevOps. #AGTech Skills Access Governance, Account Lifecycle Management, Authentication Systems, Automation Technology, Ce