At a Glance
- Tasks: Ensure secure access to sensitive systems and manage user accounts.
- Company: Join GCHQ, the UK's intelligence cyber and security agency.
- Benefits: Enjoy 25 days annual leave, competitive pension, and flexible working options.
- Other info: Structured induction and tailored development plan for your growth.
- Why this job: Make a real impact on national security while developing your skills.
- Qualifications: Experience with Windows/Linux infrastructure and Active Directory is essential.
The predicted salary is between 44142 - 44142 £ per year.
GCHQ are an intelligence cyber and security agency with a mission to keep the UK safe. We use cutting‑edge technology, ingenuity and partnerships to identify, analyse and disrupt threats. Working with our intelligence partners, MI5 and MI6, we protect the UK from terrorism, cyber‑attacks, and espionage. You’ll do varied and fascinating work in a supportive and inclusive environment that emphasises teamwork.
The role involves playing a vital part in keeping the UK safe by ensuring secure access to sensitive systems. Your work will help guarantee that the right people have the right access at the right time, supporting both our organisation and colleagues across our organisation, as well as trusted partners in the UK and around the world. Complex work is not expected immediately; the focus is on learning and building situational knowledge across multiple platforms.
Day‑to‑day work includes:
- Managing user accounts
- Resolving access and certificate issues
- Monitoring platform health to maintain compliance and reliability
Close collaboration with internal teams supports a clear understanding of access requirements, the delivery of effective solutions, and ongoing improvements to how identity services are delivered. Occasional travel to Cheltenham and Manchester is required, with limited opportunities for international travel.
Your responsibilities will include supporting day‑to‑day identity operations, such as incident resolution and service requests. You’ll also contribute to product development and roadmap planning for identity services, working with internal and external stakeholders to improve access management across multiple systems. Sharing knowledge and delivering training on secure access practices is also a key part of the job.
Salary: £44,142, including a concessionary payment of £2,758 and £6,250 London weighting. You may also qualify for a skills payment ranging from £4,513 to £9,812 and a recruitment bonus of £2,000, both dependent on technical ability and successful assessment during the interview process.
Flexible working: This role is based on full‑time hours (36 hours per week) with flexibility around start and finish times within core working hours. While our preference is for full‑time working, in exceptional circumstances we may consider part‑time arrangements, subject to business needs. We also offer hybrid working, typically involving one day per week working from home and the remainder in the office. This may vary depending on operational requirements.
About you: We’re looking for individuals with an infrastructure background and a passion for identity and access management. Practical experience with Windows or Linux infrastructure is essential, alongside core skills in Active Directory. Familiarity with Oracle Identity and Access Management (IAM) is desirable. A solid foundation of applied IT experience, gained in infrastructure or support environments is important, with sufficient exposure to confidently apply these skills in this role.
Success in this role requires exceptional interpersonal and communication skills alongside technical ability. This includes clear written communication for documentation, the ability to explain technical concepts to stakeholders, and effective relationship‑building across user communities. A collaborative mindset and a proactive approach to learning will further support success.
Learning and development: From day one, you’ll be supported through a structured induction and a tailored development plan designed to help build capability and confidence. Whether new to identity and access management or looking to deepen existing expertise, your training will combine practical experience with access to formal learning and mentoring.
Technical Delivery: managing end‑to‑end delivery of cloud platforms and ERP systems, driving digital transformation and operational efficiency.
Product Development: contributing to the roadmap and lifecycle of IAM services.
Collaboration: engaging with internal teams and external partners across the UK Intelligence Community.
Certification: pursuing qualifications from Microsoft, Linux, CyberArk, and others.
You’ll learn alongside experienced colleagues, with access to workshops, peer‑led sessions and internal conferences. As your confidence grows, greater responsibility is taken on, with opportunities to help shape the future of identity services. Progression from this role to Infrastructure Engineer typically follows a structured pathway, allowing broader product exposure and deeper subject matter expertise.
Some of our benefits: You’ll enjoy 25 days annual leave, rising to 30 days after 5 years' service, alongside 8 bank holidays and 2.5 additional leave days (set dates throughout the year). We also offer a competitive pension, with employer contributions of at least 28.97%, an interest‑free season ticket loan, and much more.
Identity & Access (IAM) Engineer employer: Careers at MI5, MI6 and GCHQ
GCHQ is an exceptional employer, offering a unique opportunity to work at the forefront of national security in a supportive and inclusive environment. With a strong emphasis on teamwork, flexible working arrangements, and a commitment to employee development, you will have access to tailored training and mentoring that fosters both personal and professional growth. The role of IAM Engineer not only provides competitive benefits, including generous annual leave and pension contributions, but also allows you to contribute meaningfully to the safety of the UK while collaborating with esteemed intelligence partners.
Contact Details:
Careers at MI5, MI6 and GCHQ Recruitment Team
StudySmarter Expert Advice🤫
We think this is how you could land Identity & Access (IAM) Engineer
✨Tip Number 1
Network like a pro! Reach out to current or former employees at GCHQ on LinkedIn. A friendly chat can give you insider info and maybe even a referral, which can really boost your chances.
✨Tip Number 2
Prepare for the interview by brushing up on your technical skills. Make sure you can confidently discuss your experience with Windows, Linux, and Active Directory. We want to see that you can handle the nitty-gritty of IAM!
✨Tip Number 3
Show off your collaborative spirit! Be ready to share examples of how you've worked with teams in the past. GCHQ values teamwork, so highlighting your interpersonal skills will set you apart.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen. Plus, it shows you’re serious about joining the team at GCHQ.
We think you need these skills to ace Identity & Access (IAM) Engineer
Some tips for your application 🫡
Tailor Your Application:Make sure to customise your CV and cover letter for the IAM Engineer role. Highlight your experience with Windows or Linux infrastructure and any relevant skills in Active Directory. We want to see how your background aligns with our mission to keep the UK safe!
Show Off Your Communication Skills:Since this role involves explaining technical concepts to various stakeholders, it’s crucial to demonstrate your written communication skills. Use clear and concise language in your application to showcase your ability to convey complex ideas simply.
Highlight Your Collaborative Spirit:We value teamwork here at GCHQ, so make sure to mention any experiences where you’ve worked closely with others. Whether it’s in a project or day-to-day operations, showing that you can collaborate effectively will set you apart from other candidates.
Apply Through Our Website:Don’t forget to submit your application through our official website! It’s the best way to ensure your application gets seen by the right people. Plus, you’ll find all the details about the role and our benefits there too!
How to prepare for a job interview at Careers at MI5, MI6 and GCHQ
✨Know Your IAM Basics
Make sure you brush up on the fundamentals of Identity and Access Management. Understand key concepts like user provisioning, access controls, and compliance requirements. Being able to discuss these topics confidently will show that you're serious about the role.
✨Showcase Your Technical Skills
Prepare to talk about your experience with Windows or Linux infrastructure and Active Directory. Have specific examples ready that demonstrate how you've managed user accounts or resolved access issues in the past. This will help you stand out as a candidate who can hit the ground running.
✨Communicate Clearly
Since this role involves explaining technical concepts to various stakeholders, practice articulating your thoughts clearly and concisely. You might even want to do a mock interview with a friend to refine your communication skills. Remember, it's not just about what you know, but how you convey it!
✨Emphasise Collaboration
GCHQ values teamwork, so be prepared to discuss how you've worked effectively with others in previous roles. Share examples of how you've collaborated with internal teams or external partners to achieve common goals. This will highlight your ability to fit into their supportive and inclusive environment.
