IAM Integration & Remediation Lead

Senior IAM Integration & Remediation Lead Contract: Initial 3 months (extensions likely) Start: ASAP Location: London (1 day per week onsite) Rate: Up to £900 per day (Inside IR35) Overview We are seeking a Senior IAM Integration & Remediation Lead to support a large-scale identity security transformation within a complex, regulated environment. This is a hands-on role requiring an experienced IAM practitioner who can rapidly assess an identity estate, identify security and operational risks, define a prioritised remediation roadmap, and lead delivery through to execution. The successful candidate will be comfortable operating with senior stakeholders while also providing deep technical direction across IAM, PAM, workforce identity, and non-human identities. Key Responsibilities * Lead IAM assessment, integration, remediation, or transformation initiatives within large enterprise environments. * Assess current-state IAM and PAM controls, identify risk exposures, and quantify security risk. * Develop and execute prioritised remediation plans focused on reducing identity-related risk. * Review workforce and non-human identity controls, including service accounts, secrets, certificates, APIs, workload identities, and CI/CD credentials. * Define target-state IAM operating models, governance, and control improvements. * Engage with CISO, Technology Risk, Internal Audit, and senior technical stakeholders. * Lead blended delivery teams and shape ongoing engineering and remediation requirements. Required Experience * Proven experience leading IAM integration & remediation within a complex regulated environment. * Strong expertise across: * Active Directory / Entra ID * Privileged Access Management (PAM) * Service Accounts & Non-Human Identities * Secrets & Certificate Management * API & Workload Identities * CI/CD Credentials * Experience assessing large-scale identity estates and developing risk-based remediation roadmaps. * Strong understanding of IAM governance, controls, and cyber security best practice. * Ability to communicate effectively with both executive and technical audiences. Desirable Experience * Financial Services, Insurance, Banking, or other regulated industry experience. * Hands-on experience with: * SailPoint or Saviynt * CyberArk or BeyondTrust * Okta * Microsoft Entra ID * HashiCorp Vault