First Quantum Minerals Ltd.

Engineer, Identity & Access Management

London Full time

At First Quantum, we free the talent of our people by taking a very different approach which is underpinned by a very different, very definite culture – the “First Quantum Way”.

Working with us is not like working anywhere else, which is why we recruit people who will take a bolder, smarter approach to spot opportunities, solve problems and deliver results.

Our culture is all about encouraging you to think independently and to challenge convention to deliver the best result. That’s how we continue to achieve extraordinary things in extraordinary locations.

Job description:

POSITION DESCRIPTION

Purpose of the role

A critical technical role within the Group IT Security function, the IAM Engineer will be responsible for implementing, maintaining, and optimisation of Identity Governance and Identity and Access Management (IAM) capabilities across the organisation’s digital landscape.

The role will act as a technical subject matter expert (SME) for all aspects of IAM, ensuring robust identity controls and governance processes are in place to support security, compliance, and operational efficiency.

Job & Candidate Requirements 

Key Responsibilities:

  • Implement and configure sustainable capabilities within FQM’s Identity Governance platform (Saviynt EIC) to ensure secure and efficient access control for enterprise applications and resources.
  • Conduct technical assessments of identity and access systems, identifying security gaps and recommending improvements
  • Design and execute technical integrations for Single Sign-On (SSO), Multi-Factor authentication and Identity lifecycle management to enhance security and streamline user authentication processes across the organisation.
  • Design and Implement Privileged Access Management (PAM) capabilities
  • Support the implementation of Just-in-Time (JIT) and Just-Enough-Access (JEA) principles
  • Assist in developing and maintaining technical documentation for IAM processes and configurations
  • Troubleshoot complex identity and access-related technical issues
  • Develop and maintain scripted solutions for identity management
  • Respond to audit findings and implement remediation measures.
  • Support the implementation of identity-related security policies and standards
  • Collaborate with Cross-Functional Teams: Work with IT, Security, and Application teams to assess and improve identity and access management solutions, ensuring alignment with business objectives.

Qualifications Required:

  • A Graduate qualification in Information Security, Computer Science, or Engineering is highly regarded
  • Professional certifications preferred (e.g. Saviynt Certified Advanced IGA Professional, SailPoint Certified IdentityIQ Engineer, SailPoint Certified Identity Security Architect), ISC2 CC, CompTIA Security+)


Experience & Skills Required:

  • 5+ years of hands-on experience in IGA/IDAM development within an Enterprise environment
  • Strong technical proficiency with:
    • Saviynt EIC, SailPoint or Okta (Saviynt preferred)
    • CyberArk
    • Microsoft EntraID
  • Scripting skills (PowerShell)
  • Experience with API integrations for identity management
  • Strong familiarity with SAML, OAuth, OpenID Connect
  • Understanding of identity protocols and security frameworks
  • Understanding of regulatory requirements and IAM security best practises
  • Experience with identity lifecycle automation tools
  • Understanding of best practise Identity use within OT/ICS Environments

Technical Competencies

  • Detail-oriented with strong analytical skills
  • Excellent technical communication abilities
  • Proactive approach to learning new technologies
  • Ability to work effectively in a team environment
  • Ability to diagnose and resolve IAM-related issues and optimise performance
  • Quick learner with a passion for cybersecurity technologies

Behavioural Traits Required:

  • Ability to work under pressure in a sometimes-stressful environment with little supervision
  • Strong verbal and written communication skills, with the ability to collaborate effectively with both technical and non-technical stakeholders.
  • Flexible and adaptable – capable of changing direction when required and flexible to meet new demands
  • Multi-tasking – can manage several concurrent projects and prioritise demands
  • Can make decisions that are well informed and timely
  • Ability to progress work without significant need for support from senior colleagues
  • Solve problems collaboratively
  • Promote innovation, desired values and ways of working
  • Be boundaryless and share knowledge to improve the wider team capability

OTHER INFORMATION

  • Travel to sites as and when required (International)
  • Commitment to continuous learning and staying current with emerging IAM technologies
  • This role is a hybrid role from the London Office - 3 days in the office

Visit our website and register for instant job alerts at careers.first-quantum.com

Follow us for the latest news at LinkedIn

If you are already a First Quantum employee and have access to the First Quantum network, log into First Quantum MINE > Careers to apply internally for this opportunity.

If you are an employee without network access, contact your Site Recruiter.