IAM Engineer

We are an organisation that exists to drive progress. Our businesses share a devotion to innovation, independence and rigour in their fields of expertise. We empower people to understand and tackle the critical challenges and changes facing the world. Our analytical rigour, global expertise and evidence-based insights enable individuals and organisations to make sense of these shifts and chart a course through them. We deliver analysis and insights in many formats to subscribers and clients in 170 countries through our four businesses, The Economist, Economist Impact, Economist Intelligence and Economist Education, which uphold our global reputation for excellence and integrity.

The Economist Group is seeking a technically adept and security-minded Identity & Access Management (IAM) Specialist to oversee and evolve our identity ecosystem. This role sits at the nexus of IT operations, security, and HR technology—ensuring that our people have the right access, at the right time, with the right controls.

The Role

• Manage and optimize our identity and access platforms—Active Directory, Okta, and AWS IAM—and integrate them with the Group's HR system, HiBob, to automate the joiner-mover-leaver lifecycle.
• Contribute to a secure and frictionless digital workplace, supporting both on-premise and cloud infrastructure.

Key Responsibilities

• Administer and maintain Active Directory, Azure AD, Okta Workforce Identity, and AWS IAM accounts, groups, and roles.
• Design and implement automated identity lifecycle workflows, synchronised with HiBob HRIS data.
• Enforce least-privilege and zero-trust principles across identity systems and applications.
• Collaborate with Security and Compliance teams to meet audit, access review, and regulatory requirements.
• Develop and maintain IAM documentation, including architecture diagrams, SOPs, and user guides.
• Troubleshoot authentication and provisioning issues across SSO, MFA, and federated applications.
• Contribute to change control processes, ensuring smooth deployment of identity-related changes.
• Support ITSM processes for access requests, approvals, and escalations in Jira Service Management.
• Identify opportunities to improve automation, governance, and reporting using scripting (Python, PowerShell, or similar).

About You

• Solid experience administering Active Directory and Okta in a hybrid or cloud environment.
• Working knowledge of AWS IAM (users, roles, policies, permissions boundaries).
• Familiarity with HRIS integrations (ideally HiBob or similar) for user provisioning.
• Understanding of SAML, OIDC, and SCIM protocols.
• Competent in PowerShell or Python scripting for automation and reporting.
• Comfortable working within ITIL/ITSM frameworks and change control processes.
• Strong attention to detail, with a collaborative and service-oriented mindset.
• Excellent written and verbal communication skills.

Desirable

• Experience with Okta Workflows, Okta Privileged Access, or AWS SSO.
• Knowledge of compliance standards such as ISO 27001, SOC 2, or GDPR.
• Exposure to modern endpoint management (e.g., Intune, Jamf) and device identity concepts.

What we offer

Our benefits package is designed to support your wellbeing, growth, and work-life balance. It includes a highly competitive pension or 401(k) plan, private health insurance, and 24/7 access to counselling and wellbeing resources through our Employee Assistance Program. We also offer a range of lifestyle benefits, including our Work From Anywhere program, which allows you to work from any location where you have the legal right to do so for up to 25 days per year. In addition, we provide generous annual and parental leave, as well as dedicated days off for volunteering and even for moving home. You will also be given free access to all The Economist content, including an online subscription, our range of apps, podcasts and more.