Active Directory & Identity Engineer

La Fosse; Greater London; Hybrid; GBP 70,000 - 100,000; Full time

Job summary

La Fosse is seeking an experienced AD & Identity Engineer to join a large-scale merger programme, delivering hands-on identity, authentication and SSO capabilities across on-premise and hybrid IT. You will implement identity changes, support SSO remediation, and help ensure Day 1 readiness in a complex enterprise environment.

Strong troubleshooting, AD administration and experience with SAML 2.0 and OIDC are essential.

Qualifications

• Hands-on AD across on-prem and hybrid environments.
• Experience with SSO across enterprise systems.
• Proven ability to implement identity changes in large programmes.

Responsibilities

• Deliver identity and authentication changes across on-premise and hybrid environments.
• Support SSO remediation and identity attribute changes.
• Implement and troubleshoot SSO integrations using SAML 2.0 and OIDC.
• Troubleshoot authentication and access issues.
• Support testing, cutover and go-live activities.
• Work with project teams to deliver structured identity changes.
• Support change and release processes throughout merger programme.
• Collaborate with programme teams to ensure Day 1 readiness.

Skills

Active Directory

SSO

SAML 2.0

OIDC

PKI

Authentication flows

Troubleshooting

Hybrid environments

Enterprise deployments

Job description

We are looking for an experienced AD & Identity Engineer to join a large-scale merger programme, providing hands-on delivery support across identity, authentication and Single Sign-On (SSO).

You will be responsible for implementing identity changes, supporting SSO remediation and helping ensure Day 1 readiness across a complex enterprise environment.

Key Responsibilities

• Deliver identity and authentication changes across on-premise and hybrid environments
• Support Microsoft Active Directory and Microsoft Entra ID changes
• Implement and troubleshoot SSO integrations using SAML 2.0 and OpenID Connect (OIDC)
• Support identity attribute changes, including UPN and email address updates
• Troubleshoot authentication and access issues
• Support testing, cutover and go-live activities
• Work closely with project and programme teams to deliver structured identity changes
• Support change and release processes throughout the merger programme

Key Skills & Experience

• Strong hands-on Microsoft Active Directory experience across on-premise and hybrid environments
• Proven experience with SSO technologies, particularly SAML 2.0 and OIDC
• Understanding of identity attributes and authentication flows
• Working knowledge of certificates and PKI in relation to identity and SSO
• Strong troubleshooting skills across authentication and access issues
• Experience delivering identity changes within large enterprise environments
• Hands-on experience supporting SSO migrations, updates or remediation
• Experience working through testing, cutover and go-live
• Comfortable working within structured project, change and release environments