Principal Engineer - Identity Access Management

Uk - Hooklead

OtherPrincipal Engineer

0 views0 saves0 applied

Apply Now

Quick Summary

Key Responsibilities

Technical Leadership Lead the end‑to‑end technical delivery of the directory transformation program, converting target‑state architecture into detailed engineering designs, implementation patterns,

Technical Tools

OtherPrincipal Engineer

Requirements

~1 min read

Responsibilities

~1 min read

→
Lead the end‑to‑end technical delivery of the directory transformation program, converting target‑state architecture into detailed engineering designs, implementation patterns, and deployment runbooks.
→
Drive collaborative requirements gathering and joint design workshops with cross‑functional stakeholders to ensure identity solutions meet business, security, compliance, and operational needs.
→
Serve as the technical authority throughout the project lifecycle, assessing business and security requirements, guiding technology selection, mentoring engineering teams, and incorporating feedback from security operations and platform teams.
→
Define and validate technical requirements for Microsoft Entra ID and on‑premises directory integrations, partnering closely with information security, risk, infrastructure, architecture, and business units to ensure seamless interoperability.
→
Execute complex platform changes, including directory consolidation, domain modernization, tenant optimization, divestitures, and merger‑related identity platform integrations.
→
Contribute to enterprise technology strategies, architectural standards, and design principles, ensuring identity and directory services consistently support Elanco’s business and security objectives.
→
Design and support the deployment of Identity and Access Management (IAM) integrations, ensuring alignment with architectural standards, technical feasibility, and secure‑by‑design patterns.

Engaging in the community (internally and externally) across multiple channels, looking to share, educate and inspire.
Establishing strong partnerships across the architecture community and Information Security, helping to identify opportunities and mitigate risks.
Working with Information Security on the implementation of the Elanco security roadmap.
Serving on various forums to analyse projects and programs to ensure they are technically sound, will do no harm, and will deliver the expected outcomes.

What You Need to Succeed (minimum qualifications):

10+ years of progressive experience in Identity & Access Management, with at least 5 years focused on enterprise directory services and hybrid identity architectures across large, global organizations.
Expert‑level proficiency in Microsoft Entra ID and Active Directory, including architecture, design, federation, conditional access, Zero Trust enforcement, modern authentication protocols, and hands‑on engineering of complex identity environments.
Deep, practical understanding of IAM principles and security frameworks, including identity governance, authentication/authorization models, least privilege, Zero Trust, modern MFA strategies, and alignment with frameworks such as NIST, CIS, ISO 27001, and Microsoft’s identity security baseline.
Extensive experience with Joiner‑Mover‑Leaver (JML) lifecycle automation, preferably Workday‑driven, including identity provisioning, role mapping, automated access workflows, and governance controls across HR‑integrated identity platforms.
Demonstrated understanding of Privileged Access Management (PAM) solutions—preferably Delinea.
Proven leadership delivering large‑scale identity transformation initiatives, including directory consolidation, domain modernization, tenant‑to‑tenant migrations, and M&A or divestiture‑driven identity restructuring.
Strong technical mentoring capability, with a track record of guiding engineering teams, influencing architectural decisions, and driving high‑impact identity programs from concept to execution.
Exceptional communication and stakeholder engagement skills, capable of presenting complex identity concepts to executives, architects, security leaders, and engineering teams, while building consensus and steering technical direction.

Additional Information:

Travel: 0-10%
Location: Hook, UK - hybrid work environement (1x per week) or remote

Don’t meet every single requirement? Studies have shown underrepresented groups are less likely to apply to jobs unless they meet every single qualification. At Elanco we are dedicated to building a diverse and inclusive work environment. If you think you might be a good fit for a role but don't necessarily meet every requirement, we encourage you to apply. You may be the right candidate for this role or other roles!

Elanco is an EEO/Affirmative Action Employer and does not discriminate on the basis of age, race, color, religion, gender, sexual orientation, gender identity, gender expression, national origin, protected veteran status, disability or any other legally protected status

Elanco may use automated tools, including AI, to support parts of our recruitment process, such as reviewing applications against job‑related criteria and/or transferrable skills. These tools help ensure a consistent, structured evaluation, but they do not make hiring decisions. All decisions involve a human reviewer. For more information on how we handle personal data, please see our Elanco Workforce Privacy Notice.