Group Overview
The TP ICAP Group is a world leading provider of market infrastructure.
Our purpose is to provide clients with access to global financial and commodities markets, improving price discovery, liquidity, and distribution of data, through responsible and innovative solutions.
Through our people and technology, we connect clients to superior liquidity and data solutions.
The Group is home to a stable of premium brands. Collectively, TP ICAP is the largest interdealer broker in the world by revenue, the number one Energy &
Commodities broker in the world, the world’s leading provider of OTC data, and an award winning all-to-all trading platform.
Founded in London in 1866, the Group operates from more than 60 offices in 27 countries. We are 5,200 people strong. We work as one to achieve our vision of being the world’s most trusted, innovative, liquidity and data solutions specialist.
Role Overview
Information Security is seeking an experienced Identity and Access Management (IDAM) Engineer to design, implement, and enhance TP ICAP's identity, access management, and privileged access capabilities. The role is responsible for the engineering, integration, automation, and governance of identity services across on-premises, cloud, and SaaS environments, supporting strategic initiatives including Privileged Access Management (PAM), Identity Governance and Administration (IGA), Zero Standing Privilege (ZSP), and cloud entitlement management. Working closely with Security, Infrastructure, Cloud, Application Development, and Risk teams, the successful candidate will help ensure access is managed securely, efficiently, and in line with regulatory requirements.
Role Responsibilities
Access Operations
Manage and review user provisioning, deprovisioning, and access changes for internal systems, SaaS apps, and cloud platforms (e.g. AWS).
Maintain user and group roles in IAM tools (e.g. Delinea, AWS, CNAPP or similar).
Design, implement and maintain identity and access management solutions across on-premises, cloud, and SaaS platforms.
Identity Governance
Support periodic access reviews, certification campaigns, and policy enforcement.
Help define and maintain role-based access controls (RBAC) and attribute-based access models.
Assist in monitoring privileged access and enforcing just-in-time or least-privilege access.
Risk, Compliance & Reporting
Support internal and external audits, maintain control evidence, and produce reporting and metrics relating to access governance, certification, and compliance activities.
Support delivery of Identity Governance and Administration (IGA) capabilities.
Provide technical support for internal audits, regulatory reviews, and security assessments.
Collaboration & Improvement
Work closely with IT, Security, HR, and Cloud unit leaders to ensure smooth access onboarding and offboarding.
Assist in incident response where access misuse or anomalies are involved
Develop integrations, automation, reporting, and process improvements that enhance IAM services and operational efficiency
Develop integrations, automation, reporting, and process improvements that enhance IAM services and operational efficiency. Provide third-line support for IAM-related incidents and contribute to strategic identity initiatives.
Privileged Access Management
Design, implement and maintain Privileged Access Management controls across human and machine identities.
Support privileged account onboarding, credential rotation, session management, and privileged access workflows.
Implement and enhance Just-in-Time (JIT) and Zero Standing Privilege (ZSP) capabilities.
Support cloud privileged access governance and entitlement management across AWS, Azure, and SaaS platforms.
Monitor privileged access activity and investigate access-related security events.
Experience / Competences
Essential
Experience with IAM platforms (e.g., Okta, Delinea, Idira etc.)
Strong experience implementing and supporting Identity and Access Management…