--- title: 'Security Engineer - Identity and Access Management (IAM) at Allica Bank' canonical: 'https://feeny.ai/job/security-engineer-identity-and-access-management-iam-allica-bank-milton-keynes-r2f9sg3wnds2' type: 'job' last_seen: '2026-09-07' --- # Security Engineer - Identity and Access Management (IAM) at Allica Bank - **Company:** Allica Bank - **Location:** Milton Keynes, United Kingdom - **Employment:** full-time - **Work type:** hybrid - **Posted:** 2026-09-03 - **Last confirmed live:** 2026-09-07 - **Apply:** https://jobs.ashbyhq.com/allica-bank/cbc13a4d-2bc2-4e92-b4a1-c31284b894fc ## Job description ## About Allica Bank Allica is the UK’s fastest growing company - and the fastest-growing financial technology (Fintech) firm ever. Our purpose is to help established SMEs, one of the last major underserved opportunities in Fintech. Established SMEs are the backbone of local communities - representing over a third of our economy - yet have been largely neglected both by traditional high street banks and modern fintech providers. Department Description Security is a hands-on, delivery-focused team that helps Allica Bank move quickly while maintaining strong, proportionate, and effective security controls. The team combines day-to-day operational support with continuous improvement, automation, control assurance, and stakeholder partnership across the bank. We work closely with Technology, Engineering, Product and business teams to make security practical and effective, while ensuring our controls support the requirements of a regulated banking environment. ## Role Description - The purpose of this role is to strengthen Allica Bank's identity and access controls by making access easier to request, safer to approve and simpler to evidence. The role will combine day-to-day IAM operations with engineering, automation, and continuous improvement to reduce manual effort and improve the security and governance of identity services. - The role sits within Security and focuses on Identity and Access Management, primarily across Microsoft Entra ID, Microsoft Entra Identity Governance, Azure identity, access management and security controls, with support for Google Cloud Platform IAM governance, engineering and automation as that capability develops. - The successful candidate will contribute to the day-to-day running of IAM services, including access requests, joiner/mover/leaver activity, access reviews, privileged access, RBAC, application SSO, and application onboarding. Alongside BAU responsibilities, they will identify and deliver improvements to processes, controls, and automation. - This is not a purely operational IAM role. The successful candidate will be expected to run IAM services, engineer improvements, automate repeatable work, strengthen controls and help mature identity services across the bank. - Experience using automation and AI tools to improve processes, reduce manual effort and strengthen security controls is desirable. - Success in this role will be measured through the quality and timeliness of IAM operations, stronger identity governance and evidence, improved automation, and reduced manual effort. Principal Accountabilities - Operate and maintain IAM services, including user lifecycle management, access requests, provisioning, deprovisioning and access changes across Microsoft Entra ID and integrated applications. - Manage identity governance and access controls, including Role-Based Access Control (RBAC), least-privilege access, Conditional Access and Privileged Identity Management (PIM). - Manage access reviews and certifications, including reviewer engagement, evidence collection, exception handling, remediation tracking and reporting. - Onboard and integrate applications into the IAM/IGA platform, including SSO, SAML/OIDC, SCIM provisioning and secure authentication using Microsoft Entra ID. - Support application and vendor onboarding from an IAM perspective, assessing authentication, provisioning, privileged access, logging, ownership and access review requirements. - Maintain effective IAM controls and audit evidence, supporting internal and external audits and regulatory requirements. - Identify and deliver improvements through automation, improved workflows, better request processes, clearer ownership and enhanced reporting, reducing manual effort and improving control effectiveness. - Support identity-related issues and investigations, working with application owners, Technology, Security and other stakeholders to resolve access issues and manage associated risks. - Maintain IAM documentation and operational standards, including process guides, access models, onboarding standards, control evidence, and runbooks. - Support wider identity and cloud access services where needed, including Azure identity, access management and security controls, credential lifecycle management, and Google Cloud IAM governance, engineering and automation. - Provide clear reporting to Security leadership, highlighting IAM risks, control status, work in progress, blockers, and remediation actions. - Support related control and regulatory activities, including Risk Smart Indicators and Data Subject Access Requests, where IAM input or evidence is needed. Personal Attributes & Experience - Experience in Identity and Access Management, Security Operations, Cloud Security or technical operations, ideally within a regulated or control-focused environment. - Good hands-on knowledge of Microsoft Entra ID and Azure identity, access management and security controls, including users, groups, Enterprise Applications, SSO, Conditional Access, Privileged Identity Management and access management controls. - Understanding of IAM principles and controls, including least privilege, RBAC, privileged access, joiner/mover/leaver processes and segregation of duties. - Experience supporting access reviews, remediation, audit evidence and operational controls, with strong attention to detail and follow-through. - Comfortably balancing BAU operational work with hands-on engineering, including improving processes, writing or adapting scripts, documenting workflows and automating repeatable tasks. - Able to work effectively with application owners, Technology, Security, suppliers and non-technical stakeholders to translate access requirements into practical and secure controls. - Strong analytical and problem-solving skills, with the ability to investigate access issues, identify root causes, and recommend practical improvements. - Clear written and verbal communication skills, with the ability to explain identity risks, controls and needed actions in plain English. - Strong ownership and accountability, particularly where access approvals, evidence, remediation and control outcomes are involved. - Understands the importance of effective, auditable controls in an FCA/PRA-regulated environment. - Able to consider the end-user experience when designing and improving access processes, balancing security, usability, and operational efficiency. - Microsoft identity and governance: Microsoft Entra Identity Governance, Conditional Access, PIM, access reviews and Enterprise Applications - Automation and scripting: Microsoft Graph, PowerShell, Logic Apps, Azure Functions or similar automation tooling - Azure identity, access management and security controls - Application integration: SAML, SCIM, OAuth, OpenID Connect, SSO onboarding and secure provisioning patterns - Google Cloud Platform IAM governance, access models, engineering standards and automation - 1Password or similar credential management platforms - Cloud audit logging and identity monitoring - Service desk and IT workflow platforms The successful candidate does not need experience across every technology listed. Curiosity, the ability to learn quickly, and a strong understanding of IAM principles are more important than knowledge of a specific product. Working at Allica Bank At Allica Bank we want to ensure our employees have the right tools and environment in which to succeed in their role and in support of our customers. Our employees are at the heart of everything we do, so our benefits are designed with you in mind: - Full onboarding support and continued development opportunities - Options for flexible working - Regular social activities - Pension contributions - Discretionary bonus scheme - Private health cover - Life assurance - Family friendly policies including enhanced Maternity & Paternity leave Don’t tick every box? Don’t worry if you don’t have all the skills or requirements listed on the job description. If you think you’ll be a good fit, we’d still love to hear from you! Flexible working We know the ‘9-to-5’ isn’t right for everyone. That’s why Allica Bank is fully committed to flexible and hybrid working. Please let us know what is best for you and, if we can, we will do our best to accommodate. Diversity We’re a diverse bunch here at Allica, with all kinds of experiences, backgrounds and lifestyles. Our openness and differences make us stronger, and we want everybody to feel comfortable bringing as much of themselves to work with them as they like. ## About Allica Bank ## Company Overview - **One-liner**: Allica Bank is a British challenger bank and fintech that provides current accounts, savings, and lending products exclusively to established small and medium-sized businesses (SMEs) in the UK. - **Entity Type**: Private (Unicorn status achieved February 2026) - **Headquarters**: London and Milton Keynes, UK (with additional hubs in Manchester and India) - **Founded**: 2019 - **Founders**: Not publicly available (the bank was founded by a team; current CEO is Richard Davies, appointed July 2020) ## Core Business - **Primary industry/industries**: Financial Services, Fintech, Business Banking (SME Banking) - **Target customers**: B2B — Established UK businesses with 5–250 employees - **Mission or purpose statement**: "To give established businesses the banking they deserve" — combining fintech knowledge with start-up spirit to transform the business banking experience. ## Products & Services - **Business Rewards Current Account**: A full-featured business current account with unlimited fee-free UK transfers, team-level access, two-person authorisation, virtual cards (up to 20 per employee), expense management, and integrations with accounting software (Sage, Xero, QuickBooks, FreeAgent). Earns up to 1.5% cashback on card spend and integrated savings pots paying up to 4.08% AER interest. - **Business Borrowing**: Includes business overdrafts and lending products tailored for established SMEs. - **Savings Accounts**: Instant access savings accounts with competitive interest rates. - **Invoice Finance & Embedded Payments** (via acquisition of Kriya, October 2025): A new offering aiming to achieve £1 billion of invoice finance lending by 2028. - **Specialist Bridging Loans** (via acquisition of Tuscan Capital, August 2024): Short-term property-backed lending. ## Market Standing - **Valuation/Market Cap**: $1.2 billion (Unicorn status, February 2026) - **Key Metric**: Annual Revenue of £371.3 million (2025); Net Income of £36.9 million (2025); Total lending over £3.7 billion; Over 30,000 business customers (February 2026) - **Notable Investors/Partners**: Ventura Capital, GLG, Sona AM, TCV, Blue Owl, Atalaya Capital Management, Warwick Capital Partners - **Growth Signals**: - Named the UK's fastest-growing private company in The Sunday Times 100 (June 2024) - Named the UK's fastest-growing fintech ever in Deloitte's 2023 UK Tech Fast 50 - Listed as the second fastest growing company in Europe in the FT1000 (March 2025) - Over 700 employees (growing to 799 in 2025) - Achieved first full-year profit in 2023 - Acquired Kriya (invoice finance) and Tuscan Capital (bridging loans) to expand product suite ## Competitive Advantages - **Dedicated Relationship Management**: Every customer gets a UK-based relationship manager on speed dial — a return to "real relationship banking" that larger banks have moved away from. - **Proprietary Technology**: Tech teams design, test, and build everything in-house specifically for the needs of established businesses, not consumers or micro-businesses. - **No Monthly Fees**: Unlike traditional banks, Allica rewards customers with cashback and interest instead of charging monthly account fees. - **FSCS Protection**: Customer deposits are protected up to £120,000 by the Financial Services Compensation Scheme. - **Speed of Execution**: Company culture emphasises "Need for Speed" — they believe executing and improving faster creates a massive competitive advantage. ## Strategic Focus - **Product Expansion**: Growing beyond core banking into invoice finance, embedded payments, and specialist lending through acquisitions. - **Scaling Customer Base**: Targeting continued rapid growth from 30,000+ business customers, with a specific goal of £1 billion in invoice finance lending by 2028. - **Talent & Culture**: Building a team that blends "fintech knowledge with start-up spirit" while maintaining a focus on transparency and delivery over hierarchy. ## Why Work Here - **Culture & Values**: "Allicans" are described as passionate about the collective mission, with a culture of top talent, big thinkers, and a truly diverse workforce. Values include "Own it," "Need for Speed," "Straight Bat," and "Lead by Example." - **Employee Satisfaction**: 92% of employees said they enjoy working together (latest survey); 86% say they enjoy working there. - **Flexible Working**: Flexible working arrangements are offered, plus enhanced maternity, paternity, and shared parental leave. - **Benefits**: Competitive financial and wellbeing benefits, plus a packed staff social calendar. - **Growth Opportunity**: Described as "the UK's fastest-growing fintech ever" — employees get to help build the future of business banking and grow their own careers in a fast-paced, high-impact environment. - **Engineering Culture**: Tech teams design, test, and build everything in-house with a focus on transparency and data-driven decision making. Worth is measured by delivery of outcomes, not job titles or headcount. ## Sources 1. [allica.bank](https://www.allica.bank/about-us) 2. [allica.bank](https://www.allica.bank/) 3. [allica.bank](https://www.allica.bank/careers) 4. [jobs.ashbyhq.com](https://jobs.ashbyhq.com/allica-bank) 5. [wikipedia.org](https://en.wikipedia.org/wiki/Allica_Bank) ## Other roles at Allica Bank - [Direct Asset Finance Specialist](https://feeny.ai/job/direct-asset-finance-specialist-allica-bank-milton-keynes-8wgvxrympe19) — Milton Keynes, United Kingdom - [Technology Risk & Controls Manager](https://feeny.ai/job/technology-risk-controls-manager-allica-bank-london-r50ee2bvdf1v) — London, United Kingdom - [Regional Lead - Direct Relationship Management - South](https://feeny.ai/job/regional-lead-direct-relationship-management-south-allica-bank-wales-tw3d7sxetx6g) — Wales - [Regional Lead - Direct Relationship Management - North](https://feeny.ai/job/regional-lead-direct-relationship-management-north-allica-bank-leeds-nzknttxa8571) — Leeds, United Kingdom - [Regional Lead - Direct Relationship Management - Midlands](https://feeny.ai/job/regional-lead-direct-relationship-management-midlands-allica-bank-east-midlands-j16zyf7brqpd) — East Midlands - [Regional Lead - Direct Relationship Management - London](https://feeny.ai/job/regional-lead-direct-relationship-management-london-allica-bank-london-7rk1107fs5qy) — London, United Kingdom - [In-life Lending Manager](https://feeny.ai/job/in-life-lending-manager-allica-bank-manchester-ay0pq02d69nv) — Manchester, United Kingdom - [Operational Excellence & Procedures Lead](https://feeny.ai/job/operational-excellence-procedures-lead-allica-bank-milton-keynes-swf6gwceqte0) — Milton Keynes, United Kingdom - [Analyst, Lending Models](https://feeny.ai/job/analyst-lending-models-allica-bank-delhi-5x4av9h4nzg9) — Delhi, India - [Incident & Problem Coordinator](https://feeny.ai/job/incident-problem-coordinator-allica-bank-milton-keynes-ng3ab55rty1t) — Milton Keynes, United Kingdom