Lead CIAM Engineer

Location: UK Remote

Closing date: 3 March 2026

Expected starting salary: £51,920 – £64,900

Enterprise Technology is Aegon's global IT partner that provides infrastructure services, information security and global/corporate application support for Aegon's businesses around the world. From 6 locations in the US, the Netherlands, UK, and Hungary, we support 20+ country units and 24000+ employees in the world. Our support consists of a wide range of centralised global IT services such as programming, database management, project management, agile/dev/ops, and more.

We continue to maximise the value from having a clear digital and data technology platform strategy that extends our ecosystem, as an approach to digitisation, enhancing customer experience, and improving operational efficiency.

As a Lead CIAM (Customer Identity and Access Management) Engineer, you’ll play a pivotal role in shaping and delivering secure, scalable identity solutions across a global enterprise. Leveraging platforms such as Okta, Ping, IBM ISAM, and Federation Services, you’ll lead the development of CIAM strategies, drive technical projects, and ensure seamless integration and automation. With a strong focus on security, performance, and compliance, you’ll work independently to deliver complex solutions, guide technical direction, and collaborate effectively with global teams.

• Develop and maintain robust CIAM strategies leveraging platforms such as Okta, Ping, IBM ISAM, and Federation Services.
• Identify opportunities for Single Sign-On (SSO) and cost optimisation across identity services.
• Lead technical projects and feasibility assessments, ensuring alignment with business goals.
• Support and document CIAM integrations, ensuring clarity and maintainability.
• Provide hands‑on technical leadership, driving automation and best practices.
• Maintain service level agreements (SLAs) and continuously optimise web service performance.
• Ensure compliance with security standards and regulatory requirements.
• Deliver complex solutions independently, with minimal oversight.
• Proactively define technical requirements and ask the right questions to shape successful outcomes.
• Guide technical direction and foster collaboration across teams.
• Contribute to peer reviews, offering constructive and insightful feedback to support team growth.
• Promote the continuous improvement of CIAM architecture, tools, and processes.

This role requires non‑standard working hours (2:00 PM – 10:00 PM BST) to effectively collaborate with global teams across multiple time zones.

• Experience with IBM Security Access Manager and Okta Auth
  0.
• Strong troubleshooting, communication, and project‑management skills.
• Knowledge of DNS, networking, Java/.NET, cloud, and scripting (JSON, Power Shell, Ansible, Java, Terraform).
• Understanding of access management, PKI, and security technologies.
• Expertise in SAML, OpenID, OAuth, federation, and hybrid cloud.
• Experience with ISAM/WebSEAL, cloud identity, and automation.
• Strategic thinking, team leadership, and zero‑trust familiarity.

• We’re serious about your future and our enhanced pension scheme is now in place. We ask you to contribute 3% of your salary to your pension and we’ll put in 9%. If you decide to contribute more, we’ll match it up to a combined total of 20% of your salary (that’s 7% from you and 13% from us).
• A discretionary bonus, depending on personal and company performance.
• 34 days leave per year (including bank holidays, pro‑rated for part‑time).

We also offer private medical cover, life assurance, critical illness cover, enhanced parental leave and a variety of lifestyle benefits to help our employees live their best lives, including retail discount vouchers, cycle2work scheme, subsidised restaurant and online GP appointments. To find out more about what to expect at Aegon .

Apply now!

We’ll need you to confirm you have the right to work in the UK. If we offer you a job and you accept, there are some checks we need to complete before you can start…