Identity, Access Management (IAM) course
Enterprise identity architecture, cloud IAM policies, privileged access, and zero trust governance.
Overview
Master modern identity and access management across cloud and hybrid environments. This programme covers directory federation, OAuth2/OIDC, SAML, least-privilege cloud IAM policy design, Privileged Access Management (PAM), role-based and attribute-based access control (RBAC/ABAC), and identity governance administration.
Syllabus
- Module 1
Foundations of Modern Identity & Authentication
Core identity architectures, AAA model, modern authentication protocols (OAuth 2.0, OpenID Connect, SAML 2.0), MFA, and passwordless flows.
- Module 2
Directory Services & Cloud Federation
Active Directory, Microsoft Entra ID (Azure AD), SCIM provisioning, user synchronisation, Single Sign-On (SSO), and identity provider (IdP) federation.
- Module 3
Cloud IAM Architecture & Policy Engineering
Writing least-privilege IAM policies, AWS IAM roles and policies, service control policies (SCPs), permission boundaries, and Azure RBAC.
- Module 4
Role-Based & Attribute-Based Access Control
Implementing scalable RBAC and dynamic ABAC models, policy evaluation logic, context-aware authorization, and entitlement management.
- Module 5
Privileged Access Management (PAM)
Privileged identity workflows, Just-in-Time (JIT) access, privileged session monitoring, break-glass procedures, and secrets rotation.
- Module 6
Identity Governance & Compliance Administration (IGA)
Access certification reviews, separation of duties (SoD), automated joiner-mover-leaver (JML) lifecycles, and audit compliance (SOC2/ISO 27001).
- Module 7
Zero Trust Architecture & Workload Identities
Conditional access policies, continuous adaptive risk evaluation, machine-to-machine workload identities, and service account security.
- Module 8
Production Capstone Project
Design and implement a complete enterprise Identity & Access Management architecture with SSO federation, automated JML lifecycle, and least-privilege cloud policies.
Who it's for
Security engineers, cloud architects, systems administrators, compliance officers, and IT professionals looking to specialize in enterprise identity architecture and zero trust access control.
Tools covered
OAuth 2.0 & OpenID Connect (OIDC), SAML 2.0 & Single Sign-On (SSO), Microsoft Entra ID / Active Directory, AWS & Azure Cloud IAM Policies, Privileged Access Management (PAM), Role & Attribute-Based Access (RBAC/ABAC), Zero Trust Architecture, Production Capstone Project.
Other programmes
- Cybersecurity Foundations
Start your cybersecurity career: the core concepts, tools and hands-on skills every security role builds on.
- DevOps Engineering
Modern infrastructure automation, continuous integration, and cloud deployment pipelines.
- Cybersecurity (SOC)
Defensive security operations, threat detection, log analysis, and incident response.
- Cloud Engineering (AWS & Azure)
Design, build and secure cloud infrastructure on both AWS and Azure, the two platforms most UK employers run.