Senior IAM Advisory & Strategy Lead

Atos is the Atos Group brand dedicated to AI-powered, secure, end-to-end digital services. Atos designs, develops, and operates critical digital environments that drive performance, resilience and sovereignty, helping public and private organizations worldwide retain control over their data and infrastructures, while meeting regulatory requirements.

With more than 52,000 employees serving over 4,500 clients across 54 countries, Atos helps modernize core IT systems, accelerate cloud and data transformation, strengthen cybersecurity, and deliver secure digital workplace environments to support its clients, its employees and society. Atos also provides consulting and advisory services through its Atos Amplify brand.

As our UK&I IAM Lead, you will help clients design, transform and operationalise mature IAM capabilities across complex enterprise environments. You will combine strategic advisory and architecture with a practical understanding of how identity services are governed, implemented, transitioned and run day to day.

This role could suit an established IAM consultant ready to take greater ownership of engagements and capability growth, or a senior practitioner from a large enterprise IAM function who wants to bring deep industry experience into consulting. You do not need to be an expert in every product. We are looking for strong end-to-end IAM knowledge, sound judgement and meaningful experience with at least one leading enterprise platform.

What will you be doing?

• Lead IAM strategy, maturity assessment, operating model and transformation engagements for public and private sector clients.
• Assess current identity capabilities, business processes, control effectiveness, technology estates and operational pain points, translating findings into clear priorities and practical roadmaps.
• Design and improve end-to-end identity lifecycle processes, including joiner, mover and leaver controls, access requests, approvals, provisioning, role and entitlement management, access reviews and deprovisioning.
• Advise on Identity Governance and Administration, Access Management, authentication, federation, single sign-on, multi-factor and passwordless authentication.
• Lead or support Privileged Access Management assessments and transformations, covering privileged account discovery, vaulting, credential rotation, session controls, just-in-time access, least privilege and operational governance.
• Apply identity-centric Zero Trust principles across users, administrators, applications, workloads and third parties, creating architectures and control patterns that can be implemented and operated in practice.
• Develop current-state, target-state and reference architectures, high-level designs, options analyses, business cases and implementation roadmaps.
• Support implementation governance, application onboarding, integration, migration, data remediation, testing, service transition and operational acceptance.
• Create practical artefacts including governance models, RACIs, runbooks, control frameworks, KPIs, service acceptance criteria and continuous-improvement plans.
• Act as a trusted adviser to business and technical stakeholders, explaining complex identity risks and design decisions in clear, outcome-focused language.
• Support bids, proposals, client workshops, statements of work and repeatable IAM offerings.
• Coach colleagues and help grow a collaborative UK&I identity community across advisory, architecture, delivery and managed services.

The identity domains you will work across

• Identity lifecycle and governance: Joiner, mover and leaver processes; identity data; access requests and approvals; provisioning and deprovisioning; roles and entitlements; segregation of duties; access certification and recertification.
• Privileged access: Privileged account governance; credential vaulting and rotation; session management and monitoring; just-in-time access; zero standing privilege; endpoint privilege management and emergency access.
• Access management: Single sign-on; multi-factor and passwordless authentication; federation; conditional and risk-based access; external identity; directory modernisation and break-glass controls.
• Zero Trust architecture: Identity as a policy enforcement point, continuous verification, least privilege, device and contextual signals, segmentation, monitoring and measurable control assurance.
• Non-human and emerging identity: Service accounts, workload identities, certificates, secrets, APIs, machine identities and governance of AI agents and autonomous services.

Requirements

• Substantial experience in Identity & Access Management within consulting, systems integration, architecture, transformation or a large enterprise BAU environment.
• A strong understanding of the full end-to-end IAM lifecycle and how identity capabilities are operationalised across people, process, governance and technology.
• Practical experience with at least one of CyberArk, Evidian, Okta, SailPoint or Microsoft Entra, plus the ability to work conceptually and technology-agnostically across other platforms.
• Experience designing, improving or governing IAM processes and controls in complex enterprise environments.
• Good knowledge of Privileged Access Management and identity-centric Zero Trust principles.
• Experience producing clear assessments, architectures, roadmaps, operating-model artefacts or service-transition outputs.
• The ability to engage credibly with senior business stakeholders, security leaders, architects, engineers and operational teams.
• Strong written and verbal communication, with the ability to turn technical complexity into practical recommendations.
• A collaborative, commercially aware and client-focused approach.
• The right to work in the UK and flexibility to travel occasionally to client or company locations.
• Experience moving from IAM strategy or project delivery into sustainable BAU operations.
• Knowledge of machine identity, workload identity, PKI, certificate lifecycle management, secrets management or service-account governance.
• Understanding of identity and authorisation models for AI agents, autonomous services and other non-human identities.
• Experience of identity threat detection and response, attack-path analysis or identity security posture management.
• Experience supporting regulated, public sector or critical national infrastructure clients.
• Relevant identity, security, cloud, architecture or service-management certifications.
• Experience supporting bids, proposals, pre-sales discovery or consulting-offering development.

What success looks like

• Clients receive clear, actionable IAM strategies and roadmaps that can move confidently into implementation and operation.
• Identity processes and controls are secure, auditable, usable and sustainable in BAU.
• Advisory, architecture, implementation and managed-service teams work together through a consistent end-to-end lifecycle.
• Atos develops reusable IAM methods, propositions and delivery assets that support growth across the UK&I.
• Emerging identity challenges, including machine and AI-agent identities, are addressed with proportionate governance and practical controls.

Rewards and benefits

• A visible role with the opportunity to shape and grow our UK&I IAM advisory capability.
• Varied work across strategy, architecture, transformation, operational readiness and service improvement.
• Opportunities for professional development, continuous learning and career progression.
• Remote and hybrid working possibilities, subject to business and client requirements.
• The opportunity to participate in volunteering, charity, inclusion and sustainability initiatives.

Please note eligibility for SC clearance is essential for this role.

As a Disability Confident employer, we encourage applications from all applicants, especially, differently abled applicants. We aim to ensure that those who meet the minimum criteria for this position will be offered an interview. We are committed and willing to making reasonable adjustments to the application and assessment process to accommodate your needs.

We are a care leaver friendly employer, if you require additional support with your application, please contact our recruiter or send an email to our dedicated mailbox.

Here at Atos, diversity and inclusion are embedded in our DNA. Read more about our commitment to a fair work environment for all.

Atos is a recognized leader in its industry across Environment, Social and Governance (ESG) criteria.