Welcome to the second Job Intelligence report.

You do not need this to stay up to date with job offers and understand which profiles are most in demand.

You just need to read this. In 10 minutes, you will be up to date and ready to spot trends and better opportunities.

So, let’s go

Summary

Emerging signals

• Senior and lead roles dominate identity hiring across regions.

• IGA remains the strongest hiring cluster in every market.

• Okta, Entra, SailPoint, and CyberArk anchor demand.

Likely next moves

• More hiring around identity architecture, governance, and platform modernization.

• CIAM demand grows where customer journeys drive transformation.

• Automation and integration skills become stronger screening criteria.

Potential risks

• Senior talent shortages could slow delivery and transformation programs.

• Platform concentration may increase vendor dependency and retraining costs.

• Compliance-heavy hiring may underweight innovation and customer experience.

Strategic focus areas

• Build depth in IGA, PAM, authentication, and CIAM.

• Prioritize platform integration, automation, and architecture capabilities.

• Strengthen leadership pipeline for roadmap and governance ownership.

Time horizon

• 0-6 months: sustained demand for senior delivery roles.

• 6-12 months: more architecture and modernization mandates emerge.

• 12-24 months: identity leadership becomes more product-oriented.

Job market Analysis

IAM

IAM — quick read

• IAM hiring in these source workbooks is mainly platform-and-governance delivery, not only policy writing.

• The strongest demand sits at Mid, Senior, and Lead/Manager levels, with juniors present but clearly smaller.

IAM — general patterns

• Employers repeatedly ask for people who can run identity lifecycle, provisioning, access governance, and application onboarding.

• The section is strongly tied to enterprise platforms rather than generic cyber roles.

• IAM jobs often sit between operations, engineering, and stakeholder-facing delivery.

IAM — skill patterns

• SailPoint is the clearest US platform signal.

• Entra ID / Active Directory is a recurring signal in Central Europe and UK/IE.

• RBAC / roles / entitlements / access governance appears as a core design skill across markets.

• Lifecycle management / JML / provisioning is a repeated requirement in the US and UK/IE material.

• Automation and integrations show up most clearly in UK/IE through PowerShell/Python and connector-style work.

IAM — responsibility patterns

• Operate and improve IAM stacks across Entra, AD, MFA, CyberArk, and governance tooling.

• Own user lifecycle processes, including onboarding, movers/leavers, and entitlement changes.

• Connect applications, systems, and directories into the IAM estate.

• Translate business or regulatory requirements into IAM solutions and controls.

• Deliver IAM workstreams for large clients, often with consulting, programme, or enterprise delivery expectations.

IAM — differences by level

• Junior: supports provisioning, access reviews, and ticket-driven lifecycle work under established controls.

• Mid: owns day-to-day IAM delivery, onboarding flows, and defined integrations with more independence.

• Senior: drives design improvements, complex integrations, governance tuning, and mentoring.

• Lead/Manager: owns roadmap, operating model, governance, prioritisation, and stakeholder or team leadership.

IAM — main differences by market

Read more

Hi all,

Welcome to the first Job Intelligence report

1. Quick reads

IAM

• IAM hiring is centered on IGA, lifecycle controls, provisioning, role models, and enterprise platform delivery.

• The strongest recurring pattern is a mix of operations + engineering + governance, with senior roles adding architecture and programme influence.

PAM

• PAM demand is highly tool-centered, with CyberArk as the clearest recurring signal across the sources.

• The work is mainly about onboarding privileged accounts, vaulting, session/password controls, and control hardening.

CIAM

• CIAM hiring is smaller than IAM, but the roles are more specialized and focused on customer-facing identity, authentication journeys, and external user experience.

• The strongest platform signals are Okta/Auth0, with the US sources also showing broader mentions of Ping and ForgeRock.

Governance

• In these sources, Governance is mostly a cross-cutting identity theme, not a fully separate hiring category.

• Governance-heavy roles are concentrated in senior and lead levels and usually combine controls, lifecycle, audit readiness, strategy, and operating model ownership.

2. Details

IAM summary card

General patterns

• IAM appears as a broad enterprise function covering joiner-mover-leaver, access requests, provisioning, RBAC, policy execution, and platform administration.

• Mid and senior roles dominate; junior hiring exists, but it is much smaller and usually sits close to support, documentation, testing, and controlled execution.

• IAM is frequently adjacent to SSO, MFA, federation, PAM, and cloud identity, especially in consulting and transformation roles.

Skill patterns

• RBAC, access lifecycle, provisioning, and JML are recurring core asks.

• Microsoft identity stack appears often: Entra ID / Azure AD, Active Directory, LDAP.

• IGA platforms are repeatedly requested, especially SailPoint and Saviynt.

• Federation and access protocols recur across markets: SAML, OAuth, OIDC, SCIM.

• Employers repeatedly value documentation, process discipline, control evidence, and stakeholder communication.

Responsibility patterns

• Operate and improve identity lifecycle processes.

• Build or maintain connectors, workflows, policies, and integrations.

• Support access governance, role models, and control execution.

• Lead or contribute to platform standardization, migrations, and technical improvements.

• Partner with business, security, audit, and engineering stakeholders on requirements and delivery.

Differences by level

• Junior: Executes defined IAM tasks, ticketing, documentation, testing, and basic provisioning under guidance.

• Mid: Owns recurring IAM delivery work, platform administration, governance tasks, and application onboarding with limited supervision.

• Senior: Owns complex implementations, automation, integrations, and design decisions; often mentors others.

• Lead/Manager: Owns roadmap, operating model, governance priorities, programme delivery, and stakeholder alignment.

Main differences by market

• US: More platform-heavy and enterprise-engineering oriented, with strong demand for Entra ID, AD/LDAP, SailPoint, lifecycle controls, and SSO/MFA/federation.

• UK & Ireland: Stronger emphasis on SailPoint/Saviynt, RBAC/JML/governance, and consulting-led delivery.

• Europe: Stronger emphasis on documentation/process, lifecycle governance, role models, and operational IAM delivery.

Read more

This has the following sections:

Snapshot:

Sections:

What to Watch:

Inside this report, the goal is to identify patterns such as:
• skills that are appearing more often across Identity roles
• expectations that are becoming stricter by seniority
• hidden signals behind familiar job descriptions
• capability gaps that candidates often underestimate
• shifts in what companies seem to value beyond the visible wording

The point is not just to ask, “What does this role require?”

The better question is:

What is the market starting to reward more clearly than before?

That is a different level of reading.

Because stronger professional moves do not usually come from reacting to every job post.

They come from understanding patterns earlier.

A typical Job Intelligence entry may look at:
• recurring requirements across multiple IAM or Identity roles
• how certain skills are moving from optional to expected
• what makes one candidate look stronger than another, even with similar experience
• where employers may be raising the bar without stating it directly
• what professionals should pay more attention to if they want to move into better roles

This section exists for readers who want more than surface-level visibility.

It is for people who want to understand the market behind the listings.

Because if you can read hiring better, you can make better decisions about how to position yourself, what to strengthen, and where to focus your effort next.

That is what Job Intelligence is for.