About the company Allica is the UK’s fastest growing company - and the fastest-growing financial technology (Fintech) firm ever. Our purpose is to help established SMEs, one of the last major underserved opportunities in Fintech. Established SMEs are the backbone of local communities - representing over a third of our economy - yet have been largely neglected both by traditional high street banks and modern fintech providers. Department Description Technology sits at the centre of Allica. We design and build the platforms that power the bank, working closely with every part of the business to deliver real impact for customers. Our teams move quickly, focus on outcomes, and take ownership from concept through to delivery. We solve complex problems, modernise processes, and enable the business to scale with confidence. What makes us different is the level of influence and autonomy engineers have. We work without the weight of legacy systems, which means we can focus on building for the future. Everyone contributes ideas and helps shape how we operate, and roles evolve as the organisation grows. This is a place for people who want to have a tangible impact and do their best work in a modern, collaborative environment. About the role The Senior IAM Platform Engineer is responsible for designing, implementing, and operating identity and access management solutions that support both internal users and customer-facing platforms. This role combines deep IAM expertise with a strong engineering mindset. You will work across IAM infrastructure, authentication platforms, and supporting services to build secure, scalable, and reliable identity solutions. The role requires hands-on engineering capability combined with platform ownership, ensuring IAM services are secure, reliable, and continuously improved through automation and DevOps practices. You will work closely with Engineering, Platform, and Information Security teams to integrate IAM capabilities into new and existing systems. This includes enabling modern authentication and authorisation patterns and ensuring IAM platforms are deployed and operated according to DevOps and cloud best practices. The role has broad technical scope. As well as building and improving IAM capabilities, you will help support and evolve the IAM platform itself, working with modern cloud infrastructure, automation, monitoring, and CI/CD pipelines. Demonstrate responsible and effective use of GenAI-assisted development tools (e.g. GitHub Copilot) to improve engineering productivity and quality. Success in this role is measured by the reliability and security of IAM services, the quality of integrations with engineering teams, and the ability to continuously improve identity capabilities that support the bank’s growth. Principal Accountabilities IAM Platform Engineering Design, implement, and maintain secure IAM solutions supporting both Customer IAM and Workforce IAM. Configure and operate IAM platforms within the Ping Identity suite, particularly PingDirectory and PingFederate. Develop and maintain authentication and authorisation integrations across internal systems and customer-facing platforms. Ensure IAM solutions are scalable, resilient, and aligned with modern engineering practices. Ensure IAM services meet high availability, resilience, and security standards required for critical banking systems. Identity Architecture & Integration Work with engineering teams to integrate IAM capabilities into applications and services. Implement and support modern authentication protocols including SAML, OAuth2, and OpenID Connect. Contribute to identity architecture decisions and ensure solutions align with security, compliance, and platform standards. Help define patterns for secure identity integration across services and platforms. Design and support API-driven identity integrations across internal services and external platforms. DevOps & Platform Support Build and operate IAM platforms using DevOps and infrastructure-as-code practices, enabling automated deployment, configuration, and scaling. Implement monitoring, logging, and alerting to maintain visibility and operational health of IAM systems. Participate in incident response and troubleshooting for IAM-related issues, providing Tier-3 support where necessary. Continuously improve the automation, deployment, and operational management of IAM infrastructure. Identity Governance & Security Work with Information Security, Risk, and Compliance teams to support identity governance and access control processes. Contribute to IAM standards, policies, and best practices across the organisation. Support initiatives related to access controls, identity lifecycle management, and audit requirements. Help ensure identity solutions align with regulatory expectations and internal security frameworks. Collaboration & Enablement Partner with Engineering, Platform, and Product teams to ensure IAM capabilities support new systems and services. Provide guidance and education to teams integrating with IAM platforms. Document architecture, integrations, and operational procedures to ensure knowledge sharing across teams. Contribute to the continuous improvement of IAM tooling, processes, and engineering practices. Personal Attributes & Experience Requirements Strong experience working in Identity and Access Management, including both Customer IAM and Workforce IAM. Strong hands-on experience with the Ping Identity platform, particularly PingDirectory and PingFederate, including configuration, integration, and operational support in production environments. Experience integrating IAM capabilities into distributed systems, enterprise applications, and customer-facing digital platforms. Strong understanding of authentication and authorisation standards, including SAML, OAuth2, and OpenID Connect. Experience working with Active Directory and Azure Active Directory or comparable identity platforms. Engineering & Technical Skills Strong analytical and problem-solving skills with an engineering-led approach to troubleshooting and system design. Experience integrating IAM platforms with applications and services. Familiarity with DevOps practices, CI/CD pipelines, and infrastructure automation. Experience working with cloud platforms, ideally Microsoft Azure. Experience implementing monitoring, logging, and operational support for critical systems. Collaboration & Communication Strong communication skills with the ability to work effectively across engineering, platform, security, and product teams. Ability to explain identity concepts and solutions to both technical and non-technical stakeholders. Comfortable working in a high-growth engineering environment with evolving platforms and requirements. Nice to have Experience with PingOne MFA or other modern multi-factor authentication platforms. Exposure to Privileged Access Management (PAM) technologies. Experience working in regulated environments, particularly financial services. Experience contributing to secure system design and threat modelling. Working at Allica Bank At Allica Bank we want to ensure our employees have the right tools and environment in which to succeed in their role and in support of our customers. Our employees are at the heart of everything we do, so our benefits are designed with you in mind: Full onboarding support and continued development opportunities Options for flexible working Regular social activities Pension contributions Discretionary bonus scheme Private health cover Life assurance Family friendly policies including enhanced Maternity & Paternity leave Don’t tick every box? Don’t worry if you don’t have all the skills or requirements listed on the job description. If you think you’ll be a good fit, we’d still love to hear from you! Flexible working We know the ‘9-to-5’ isn’t right for everyone. That’s why Allica Bank is fully committed to flexible and hybrid working. Please let us know what is best for you and, if we can, we will do our best to accommodate. Diversity We’re a diverse bunch here at Allica, with all kinds of experiences, backgrounds and lifestyles. Our openness and differences make us stronger, and we want everybody to feel comfortable bringing as much of themselves to work with them as they like.
