Associate Director, Identity Governance and Administration

Position Title: Associate Director Identity Governance and Administration in our Manchester office.

Fitch Group is currently seeking a Senior Identity and Governance Administration (IGA) Engineer based out of our Manchester office.

As a leading global financial information services provider Fitch Group delivers vital credit and risk insights robust data and dynamic tools to champion more efficient transparent financial markets. With over 100 years of experience and colleagues in over 30 countries Fitch Groups culture of credibility independence and transparency is embedded throughout its structure which includes Fitch Ratings one of the worlds top three credit ratings agencies and Fitch Solutions a leading provider of insights data and analytics. With dual headquarters in London and New York Fitch Group is owned by Hearst.

Fitch is seeking a Senior IGA Engineer to drive the design implementation and ongoing evolution of our Identity and Governance Administration programme. This is a hands-on technical role that bridges engineering and governance: the successful candidate will build and maintain integrations between our IGA platform (SailPoint Identity Security Cloud) and the wider technology estate design and implement lifecycle and access request workflows and contribute to platform development using Python and modern tooling. Beyond the code this person will be a credible technical voice in governance forums audit engagements and stakeholder conversations able to articulate identity concepts clearly and translate business requirements into working solutions.

How Youll Make an Impact:

• Design develop and maintain integrations between SailPoint Identity Security Cloud and internal and external systems (HR platforms cloud providers SaaS applications on-premises directories) using connectors REST APIs and custom rules/scripts.
• Build and maintain privileged-access integrations with Delinea Secret Server / Delinea Platform including vault configuration secret lifecycle and external-secrets distribution.
• Author Python scripts and automation to extend IGA platform capabilities: provisioning logic aggregation customisation transformation rules reporting pipelines and operational tooling.
• Design and implement joinermoverleaver (JML) workflows access request workflows and access certification campaigns within SailPoint aligning them to business policy and control requirements.
• Manage the full development lifecycle of IGA artefacts version-controlled in Git containerised where appropriate using Docker and deployed through structured change processes.
• Operate and administer the IGA programme: account onboarding entitlement management role engineering (RBAC) separation of duties least-privilege enforcement and attestation cycles.
• Maintain and develop the IGA operations portal and team-facing tooling; front-end experience is a practical advantage when extending or customising web-based components.
• Monitor platform health integration performance and connector status; raise and track issues with vendors or internal teams through timely resolution.
• Evidence of IGA governance controls for audit engagements (e.g. SOX Dodd Frank SOC 2 internal audit) preparing walkthroughs evidence packs and remediation tracking.
• Maintain technical documentation runbooks SOPs and architecture diagrams; keep them current as integrations and workflows evolve.
• Manage non-human identities: service accounts API credentials certificates and secrets including lifecycle governance vaulting and distributed secrets via external-secrets patterns (e.g. AWS Secrets Manager Azure Key Vault).
• Apply AI-assisted tooling and analytics to improve anomaly detection provisioning accuracy and audit evidence of quality while maintaining governance and data-protection standards.
• Collaborate with engineering operations compliance and security teams to onboard applications and services into the IGA platform providing clear technical guidance throughout.

You May be a Good Fit if:

• 5 years of hands-on experience in an IGA or IAM engineering role with demonstrable platform implementation and integration work not solely operational support.
• Direct experience with SailPoint Identity Security Cloud (IdentityNow) including connector configuration rule development workflow design and access certification or equivalent depth on a comparable IGA platform.
• Experience with Delinea Secret Server / Delinea Platform for privileged access management including vault setup secret lifecycle and integration with broader IGA workflows.
• Proficient in Python for scripting and automation in an enterprise context; comfortable writing maintainable reviewable code and working within a Git-based development workflow.
• Practical experience with Docker for containerising tooling and services; understanding of how containers fit into a modern integration and deployment pipeline.
• Strong integration experience: designing and implementing API-based (REST/SOAP) connections between IGA platforms and external systems such as HR systems cloud identity providers ITSM platforms and directory services.
• Solid understanding of IGA and governance concepts: JML lifecycle RBAC least privilege separation of duties access certification privileged session management and break-glass procedures.
• Familiarity with directory services and cloud identity platforms (e.g. Entra ID / Azure AD Active Directory Amazon AWS) and common enterprise environments (Linux Windows Server).
• Experience supporting audit or regulatory engagements (SOX Dodd Frank SOC2) including evidence preparation control walkthroughs and remediation tracking.
• Strong written and verbal communication skills; able to present technical concepts clearly to both engineering peers and non-technical stakeholders and auditors.
• Experience with collaboration and documentation tools such as Microsoft 365 (SharePoint Online Teams) and the Atlassian suite (Confluence Jira).

What Would Make You Stand Out:

• Experience with or a comparable JavaScript front-end framework particularly in the context of extending or building identity-related web interfaces or portals.
• Exposure to secrets-management patterns using external secrets operators or cloud-native vaults (AWS Secrets Manager Azure Key Vault Oracle Wallet).
• Relevant certifications in identity or security domains (e.g. SailPoint Certified IdentityNow Engineer CISSP CISM CISA Security) are beneficial but not mandatory.
• Familiarity with infrastructure-as-code or CI/CD tooling in the context of deploying identity integrations and automation.
• Experience contributing to identity programme strategy not just execution: connector roadmaps lifecycle policy design or IGA platform selection.
• Experience using AI tools to improve engineering productivity accelerate analysis reduce repetitive work and strengthen the quality and consistency of technical deliverables.
• Hands-on experience with AI coding assistants for code generation refactoring debugging test creation documentation and code review with appropriate human oversight and security controls.

Why Choose Fitch:

• Hybrid Work Environment: 3 days a week in office required based on your line of business and location

• A Culture of Learning & Mobility: Dedicated trainings leadership development and mentorship programs designed to ensure that your time at Fitch will be a continuous learning opportunity

• Investing in Your Future: Retirement planning and tuition reimbursement programs that empower you to achieve your short and long-term goals

• Promoting Health & Wellbeing: Comprehensive healthcare offerings that enable physical mental financial social and occupational wellbeing

• Supportive Parenting Policies: Family-friendly policies including a generous global parental leave plan designed to help you balance career and family life effectively

• Inclusive Work Environment: A collaborative workplacewhere all voices are valued withEmployee Resource Groups that unite and empower our colleagues around the globe

• Dedication to Giving Back: Paid volunteer days matched funding for donations and ample opportunities to volunteer in your community

At Fitch AI is embedded in how we work every daysupporting smarter decision-making streamlining workflows and enabling new ways to create value for our business and clients. Intelligent solutions are increasingly part of our day-to-day operations helping teams work more efficiently and think differently as we continue to evolve. Were looking for colleagues who are comfortable operating in an AI-enabled environmentor who are curious adaptable and eager to build their AI literacy over time. We value professionals who embrace technology as part of continuous learning and who are committed to using it thoughtfully to enhance how work gets done.

Fitch is committed to providing global securities markets with objective timely independent and forward-looking credit opinions. To protect Fitchs credibility and reputation our employees must take every precaution to avoid conflicts of interest or any appearance of a conflict of you be successful in the recruitment process at Fitch Ratings you will be asked to declare any securities holdings and other potential conflicts prior to commencing employment. If you or your immediate family have any holdings that may conflict with your work responsibilities you may be asked to divest yourself of them before beginning work.

Fitch is proud to be an Equal Opportunity and Affirmative Action Employer. We evaluate qualified applicants without regard to race color national origin religion sex sexual orientation gender identity disability protected veteran status and other statuses protected by law.

Disclaimer on Benefits Information

In accordance with the requirements of the EU Pay Transparency Directive the benefits described in this job advertisement represent a general overview and do not constitute the full list of benefits available for this position. Comprehensive and final details regarding compensation and benefits will be provided to candidates at the offer stage.