Identity and Access Management Lead

• Lead QRT’s IAM and IGA strategy, architecture, roadmap, and delivery.
• Develop identity lifecycle management, application onboarding, entitlement governance, and access certification.
• Redesign Active Directory groups, legacy permissions, and access models, establishing clear ownership of applications, roles, entitlements, and access decisions.
• Develop pragmatic role- and attribute-based access models and improve the automation and accuracy of joiner, mover, and leaver processes.
• Own the global PAM programme, including the continued development and adoption of PrivX.
• Redesign privileged access to production, infrastructure, cloud, and trading-critical environments.
• Reduce standing privileges through controlled, time-bound, and auditable access, with effective controls for administrative accounts, emergency access, and privilege escalation.
• Own the enterprise secrets-management programme and HashiCorp Vault platform.
• Define how credentials, certificates, API keys, and other secrets are created, stored, rotated, and revoked.
• Reduce embedded, shared, and long-lived credentials, while establishing governance for service accounts, workloads, applications, and AI-agent identities.
• Lead authentication and authorisation programmes across the workforce, infrastructure, cloud, and internally developed applications.
• Develop strategies and reusable patterns for SSO, MFA, passwordless authentication, phishing-resistant credentials, applications, APIs, platforms, and production systems.
• Lead and develop the IAM team, manage specialist partners and vendors, and work closely with Security, Infrastructure, Cloud, Engineering, application owners, and business teams.
• Maintain a clear roadmap, define meaningful measures, communicate progress and risks, and support security incidents, audits, and regulatory reviews involving identity or access.

Your Present Skillset

• Strong experience leading IAM, IGA, PAM, or identity-security engineering in a complex technology environment.
• Deep knowledge of identity governance, privileged access, secrets management, authentication, and authorisation.
• Practical experience with SailPoint, Active Directory, Entra ID, Okta, PAM technologies, and HashiCorp Vault.
• Experience redesigning production access and implementing least-privilege and time-bound access models.
• Strong understanding of human, service, workload, and machine identities.
• Experience delivering SSO, MFA, passwordless authentication, and modern application-authorisation models.
• Strong technical capability across APIs, automation, scripting, and system integration.
• A good understanding of Windows, Linux, cloud, and modern software-delivery environments.
• Experience leading technical teams and turning complex security risks into practical engineering priorities.

QRT is an equal opportunity employer. We welcome diversity as essential to our success. QRT empowers employees to work openly and respectfully to achieve collective success. In addition to professional achievement, we offer initiatives and programmes to enable employees to achieve a healthy work-life balance.