IAM Engineer

While youll have heard our name theres a lot you probably dont know about NEXT. Like how we create most of our systems ourselves whether its a website mobile app or application. Whats more were growing. Fast. And its the kind of growth and investment that is exciting for everyone in our business.

NEXT has made headlines for all the right reasons but youll never catch us in a quandary over security. Retail is now one of the most targeted industry verticals in Cyber Security we face a constantly changing threat landscape ranging from script kiddies to APTs that are directly or indirectly targeting our software and data. We have a huge online presence and large retail estate which we have to protect against these threats and so it is important we have the people and technology to rise to this challenge.

About the role

Working as part of the Identity and Access Management Team you will be responsible for supporting the Identity Governance and Access management for the Next business.

You will also be responsible for supporting the lifecycle of access and identity covering the full Joiners Movers and Leavers processes. You will work continuously on our IGA processes to provide security and user experience enhancements.

There will be a requirement to support the GRC and Audit teams to ensure that the IAM processes and current access models meet compliance and regulatory requirements.

You will work closely with business users and stakeholders to remediate any issues and ensure the team remains effective as new applications or services are introduced.

The role will require participation in a shift rota and supporting out of hours work where required by the business.

Key Responsibilities

• Manage and maintain Nexts Identity Access Management solution and directory services
• Conduct periodic user reviews and re-certifications of access.
• Respond to any issues or incidents related to Identity and Access.
• Support Audit requirements to ensure compliance with policies and regulations
• Highlight areas of user awareness to be implemented into security awareness training.
• Assist with the development and implementation of IAM policies procedures and guidelines.
• Create and maintain operational procedure configuration and technical documentation.
• Highlight opportunities for continual improvements to enhance the end-user experience increase technology value and improve security posture.
• Work closely with key stakeholders to understand requirements and drive the design development and implementation of improvements to our IAM systems
• Maintain metrics and reporting to ensure the performance of our IGA controls and the health of our Identity Services.
• Monitor IAM systems and respond to any violations.
• Assist Incident Response team with the investigation and resolution of Security Incidents when required.

Criteria

Essential

• A keen interest in Information Technology and/or Cyber Security.
• Ability to effectively plan and prioritise workloads and report on current progress.
• Solid and demonstrable understanding of the IAM cybersecurity landscape including identity stores authentication / authorisation PAM MFA and IGA.
• Clear understanding of Microsoft Identity Services (eg. Active Directory Entra).
• Solid understanding of Windows Operating Systems (eg. Policies Access / Privilege models Admin Account Requirements).
• A team player who is hardworking and self-motivated.
• Excellent attention to detail.
• Strong communication skills both verbal and written.
• Understand and operate change management.

Desirable

• Project delivery experience.
• Familiarity with IGA technologies.
• Relevant industry recognised Microsoft Technology qualification.
• Understanding and experience of working for an eCommerce Retail company.
• Knowledge of scripting languages such as Powershell or Python.