Senior Software Engineer – Identity & Access Management (IAM)

Position Description:

As a Senior Software Engineer specialising in Identity and Access Management (IAM) at CGI, you’ll help shape secure digital services that protect how users access critical web, mobile and API platforms. Working on high-impact programmes, you’ll take ownership of designing and delivering modern authentication and authorisation solutions that enable our clients to innovate with confidence. You’ll have the freedom to bring fresh thinking to complex security challenges, applying modern identity standards to create robust, scalable solutions. Alongside CGI experts across engineering, security and architecture, you’ll be supported by a collaborative community where knowledge is shared, ideas are valued and your expertise can make a lasting difference.

CGI was recognised in the Sunday Times Best Places to Work List 2025 and has been named a UK ‘Best Employer’ by the Financial Times. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you’ll be part of an open, friendly community of experts. We’ll train and support you in taking your career wherever you want it to go.

Due to the secure nature of the programme, you will need to hold UK Security Clearance or be eligible to go through this clearance. This is a hybrid position.

Your future duties and responsibilities:

In this role, you will take ownership of designing, developing and supporting secure authentication and authorisation services across web, mobile and API environments. You’ll apply your IAM expertise to build resilient identity solutions using standards such as OpenID Connect (OIDC) and OAuth 2.0, helping our clients protect their services while delivering seamless user experiences.

You’ll work collaboratively with security, architecture and engineering specialists to solve complex identity challenges, establish effective IAM patterns and continuously improve security capabilities. You’ll be encouraged to explore new approaches, contribute your ideas and develop your expertise while delivering solutions that have a meaningful impact.

• Design & Deliver: Build secure authentication and authorisation services using OIDC and OAuth 2.0.

• Integrate & Secure: Implement third-party identity provider integrations, including platforms such as Auth0.

• Strengthen & Protect: Deliver SSO, MFA, JWT/token-based authentication and scope- and claims-based authorisation.

• Control & Govern: Implement RBAC, policy-based access controls and least-privilege principles.

• Collaborate & Influence: Work with security, architecture and development teams to establish IAM standards, patterns and best practices.

• Engineer & Improve: Contribute to secure API architectures, cloud-native security solutions and infrastructure automation.

• Resolve & Optimise: Diagnose and resolve authentication, authorisation and identity federation issues.

Required qualifications to be successful in this role:

You’ll bring substantial software engineering experience alongside strong expertise in Identity and Access Management, with a proven ability to design and implement secure authentication and authorisation solutions. You should be comfortable applying modern identity standards to complex environments and collaborating across technical disciplines to turn security requirements into robust, maintainable solutions.

• Strong IAM expertise: Extensive experience with authentication and authorisation technologies and architectures.

• OIDC & OAuth 2.0: Deep understanding and practical experience of OpenID Connect and OAuth 2.0.

• Authentication flows: Proven ability to design and implement secure authentication and authorisation flows.

• Identity federation: Experience with federation, third-party identity providers and platforms such as Auth0.

• Tokens & policies: Strong knowledge of token management, JWTs, claims mapping, scopes and authorisation policies.

• Access controls: Strong understanding of RBAC, policy-based access control and least-privilege principles.

• Enterprise identity: Practical knowledge of SSO, MFA and session management.

• Collaborative delivery: Ability to work effectively across engineering, security and architecture teams while sharing expertise and contributing new ideas.

#LI-JW1

Skills:

• Health Care Consulting

• Identity and access mgt (IAM)

• OpenID Connect

What you can expect from us:

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and direction.

Your work creates value. You’ll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise.

You’ll shape your career by joining a company built to grow and last. You’ll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons.

That same commitment to fairness extends to how we use technology. To support our recruitment team, AI tools may be used to help assess applications though they never replace human judgement. All hiring decisions remain entirely in the hands of our recruitment professionals.

Come join our team—one of the largest IT and business consulting services firms in the world.