Software Engineer - Identity & Access Management (IAM) in City of Westminster

In this role, you will take ownership of designing, developing and supporting secure authentication and authorisation services across web, mobile and API environments. You'll apply your IAM expertise to build resilient identity solutions using standards such as OpenID Connect (OIDC) and OAuth 2.0, helping our clients protect their services while delivering seamless user experiences. You'll work collaboratively with security, architecture and engineering specialists to solve complex identity challenges, establish effective IAM patterns and continuously improve security capabilities. You'll be encouraged to explore new approaches, contribute your ideas and develop your expertise while delivering solutions that have a meaningful impact.

• Design & Deliver: Build secure authentication and authorisation services using OIDC and OAuth 2.0.
• Integrate & Secure: Implement third-party identity provider integrations, including platforms such as Auth0.
• Strengthen & Protect: Deliver SSO, MFA, JWT/token-based authentication and scope- and claims-based authorisation.
• Control & Govern: Implement RBAC, policy-based access controls and least-privilege principles.
• Collaborate & Influence: Work with security, architecture and development teams to establish IAM standards, patterns and best practices.
• Engineer & Improve: Contribute to secure API architectures, cloud-native security solutions and infrastructure automation.
• Resolve & Optimise: Diagnose and resolve authentication, authorisation and identity federation issues.
  You'll bring substantial software engineering experience alongside strong expertise in Identity and Access Management, with a proven ability to design and implement secure authentication and authorisation solutions. You should be comfortable applying modern identity standards to complex environments and collaborating across technical disciplines to turn security requirements into robust, maintainable solutions.
• Strong IAM expertise: Extensive experience with authentication and authorisation technologies and architectures.
• OIDC & OAuth 2.0: Deep understanding and practical experience of OpenID Connect and OAuth 2.0.
• Authentication flows: Proven ability to design and implement secure authentication and authorisation flows.
• Identity federation: Experience with federation, third-party identity providers and platforms such as Auth0.
• Tokens & policies: Strong knowledge of token management, JWTs, claims mapping, scopes and authorisation policies.
• Access controls: Strong understanding of RBAC, policy-based access control and least-privilege principles.
• Enterprise identity: Practical knowledge of SSO, MFA and session management.
• Collaborative delivery: Ability to work effectively across engineering, security and architecture teams while sharing expertise and contributing new ideas.
  As a Senior Software Engineer specialising in Identity and Access Management (IAM) at CGI, you'll help shape secure digital services that protect how users access critical web, mobile and API platforms. Working on high-impact programmes, you'll take ownership of designing and delivering modern authentication and authorisation solutions that enable our clients to innovate with confidence. You'll have the freedom to bring fresh thinking to complex security challenges, applying modern identity standards to create robust, scalable solutions. Alongside CGI experts across engineering, security and architecture, you'll be supported by a collaborative community where knowledge is shared, ideas are valued and your expertise can make a lasting difference., Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you'll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That's why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company's strategy and direction. Your work creates value. You'll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You'll shape your career by joining a company built to grow and last. You'll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals. Come join our team-one of the largest IT and business consulting services firms in the world.Discover CGI London, England, United Kingdom > 1000 employees IT services We are a global business with 91,500 professionals across hundreds of locations worldwide, providing end-to-end IT and business process services that drive our clients' businesses. In the UK alone, we have around 6,000 member-partners working across 19 towns and cities, doing everything from writing complex code to designing sophisticated software solutions. The work we do powers some of the most ambitious projects that touch the lives of many. Our approach sets us apart, characterised by our proximity model, international presence, expertise, and operational excellence. We organise our operations within metro markets where our clients have concentrated footprints, empowering our local teams to build trusted, in-person relationships. As you build your career here, you'll develop your skills, share your insights, and work side-by-side with colleagues and clients