Senior Principal - IAM Operations

About the role

The Senior Principal, IAM Directory Services is the senior technical authority for the security, resilience and continuous hardening of GSK’s enterprise directory services. The role leads a defined area of the IAM Directory Services capability and ensures that Active Directory, Microsoft Entra ID and the supporting identity synchronisation layer are designed, operated and improved using secure-by-design and defence-in-depth principles.

What you'll do

• Act as the senior technical authority for the security architecture, hardening and operational integrity of Active Directory
• Lead a defined area of the Directory Services security capability, including its delivery roadmap, technical standards, risk position and measurable security outcomes
• Embed secure-by-design principles into new directory services, migrations, integrations and material changes, ensuring that threat modelling
• Design, implement and maintain a tiered administrative security model that separates identity control-plane administration from server
• Own the architecture and security controls for privileged administration, including hardened administrative workstations, bastion or jump-host services

What you need

• IAM
• Incident response
• Active Directory
• Vulnerability assessment
• Risk management
• LLMs

Good to have

• SIEM
• CISSP
• PowerShell
• Penetration testing