Full job descriptionContract - IAM EngineerBasic informationLocation

London

Business Line

Technology & Transformation

Job Type

Contract

Date published

10-Sep-2026

Req #

25106
Job descriptionJob Title: IAM Engineer (contract)
Location: London Hybrid 2-3 days a week in the London office
Duration: 4 months
Contract Start Date: ASAP *please note that onboarding will take 4-6 weeks from the offer
Day Rate: Competitive (Inside IR35)
Deloitte
Working with the Deloitte Associate (Contractor) Programme means we can offer you the opportunity to work on a variation of industry and client related projects. Our aim is to retain the best talent and so when your project end date nears our team of Talent Community Advisors will be working with you to look at alternative projects within the firm that suit your experience should you wish to continue with Deloitte.
The Role
We are looking for a Cloud IAM Engineer to design and deliver secure identity and access management (IAM) solutions across AWS and GCP environments. Working with security, infrastructure, service engineering and business application teams, you will define IAM roles, policies and controls that enable teams to build, support and consume public cloud services securely. You will create self-service automation and reusable libraries for identities and permissions, while delivering solutions through CI/CD pipelines with automated testing and validation. This role suits a hands-on engineer who can work independently, take ownership and operate effectively in a large, complex or regulated environment.
Essential Skills and Experience

*Hands-on experience with cloud-native services inAWS or GCP .

*Experience designing and implementingenterprise security solutions within Financial Services or another large, complex or global environment.

*Strong experience withInfrastructure as Code using Terraform and CloudFormation .

*Proficiency inPython, Go or Java .

*Experience with unit testing frameworks such asBehave, Pytest or JUnit.

*Experience developing and securingSOAP and REST-based web service APIs.

*Experience withDevOps and A gile methodologies, including automated solution delivery and testing through CI/CD pipelines.

*Strong interpersonal andcommunication skills .
*Able to work independently, manage multiple priorities and take ownership of defined project or initiative components.
Desirable skills:
*Relevant certification such as CISSP, AWS Certified Security - Specialty or Google Professional Cloud Security Engineer.
*Experience creating reusable IAM automation, libraries and self-service capabilities in public cloud environments.
Deliverables: Responsibilities but not limited to:
*Collaborate with cloud security, infrastructure, service engineering and business application teams to define and implement IAM roles and policies for public cloud services.
*Define and develop security controls and tooling so IAM implementations in public cloud comply with applicable cloud security standards and policies.
*Build automation and reusable libraries that allow developers to create IAM identities and permissions through self-service.
*Deliver IAM solutions through CI/CD pipelines with automated testing and validation.
IR35
As a means of managing tax, commercial and reputational risks, Deloitte prohibits the use of Associates through Personal Service Companies (’PSCs’). All Associates must contract under PAYE arrangements through a Deloitte approved ’Employment Company’ (aka ’umbrella company.’)