IAM Consultant/Developer – Microsoft Entra ID

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Conduct an audit of the current identity landscape, including on-premises Active Directory and external identity providers, and develop the target-state Microsoft Entra ID architecture.

• Strategically plan and implement phased or staged identity migration cutovers to minimize disruptions to ongoing services.

• Set up and oversee synchronization between on-premises and cloud environments utilizing Microsoft Entra Connect or Entra Cloud Sync.

• Execute Multi-Factor Authentication (MFA), Conditional Access policies, and passwordless login in accordance with Zero Trust principles.

• Migrate or re-establish enterprise application Single Sign-On (SSO) using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).

• Implement Privileged Identity Management, Entitlement Management access packages, and Access Reviews.

• Monitor sign-in and audit logs as well as identity protection signals during and post-migration to address any issues.

• Create runbooks and ensure a thorough handover to the operations team.

• Act as a trusted technical advisor and delivery lead within client environments.

⛳️ Requirements

• Demonstrated experience in executing a migration to Microsoft Entra ID, previously known as Azure AD, from on-premises Active Directory Domain Services or third-party Identity Providers like Okta, Ping, or ForgeRock.

• Proficient understanding of Conditional Access, Zero Trust security frameworks, and protocols including SAML 2.0, OAuth 2.0, and OIDC.

• Skilled in PowerShell scripting for automating identity lifecycle processes, preferably using the Microsoft Graph PowerShell SDK.

• Ability to work autonomously and effectively communicate migration risks and status to non-technical stakeholders.

• Knowledge of KQL for log analysis within Microsoft Sentinel or Azure Monitor is a plus.

• Experience with Entra ID B2B/B2C is a plus.

• Familiarity with other Identity and Access Management (IAM) platforms such as ForgeRock, Ping, or Okta is advantageous.

• Certifications such as SC-300, SC-100, SC-500, or CISSP are beneficial but not required.

🏝️ Benefits

• Comprehensive health and wellness programs.

• Opportunities for professional development and training.

• Flexible work arrangements.

• Supportive and inclusive work culture.