IAM Consultant/Developer (Microsoft Entra ID) - UK, fully remote

Nasstar; Greater London; Remote; GBP 70,000 - 110,000; Part time

Job summary

Colibri Digital is seeking an IAM Consultant/Developer with hands-on experience delivering migrations to Microsoft Entra ID for large user bases. You’ll blend IAM architecture with practical implementation, migrating on-prem AD DS or third‑party IdPs, and aligning with Zero Trust and MFA.

This contract role is remote in the UK, working with client engagements to design target state, execute migration, and handover to operations with clear runbooks.

Qualifications

• Proven experience delivering a migration onto Microsoft Entra ID (formerly Azure AD) from on-prem AD DS or a third‑party IdP (Okta, Ping, ForgeRock, etc.).
• Demonstrable experience migrating large user bases (500k+).
• Strong working knowledge of Conditional Access, Zero Trust security models, and modern auth protocols (SAML 2.0, OAuth 2.0, OIDC).
• Experience with DNS, TLS certificates and Load Balancers.
• Confident PowerShell scripting for identity lifecycle automation, ideally via the Microsoft Graph PowerShell SDK.
• Ability to communicate migration risk/status to non-technical stakeholders.

Responsibilities

• Discovery & design — audit identity estate and design target-state architecture in Entra ID.
• Migration execution — plan and run cutover with phased migration to minimise disruption.
• Hybrid identity — configure on-prem and cloud synchronization during transition.
• Authentication & security — implement MFA and conditional access aligned to Zero Trust.
• Application integration — migrate or re-establish SSO for enterprise apps using SAML, OAuth 2.0, OIDC.
• Identity governance — set up PIM, access reviews, and entitlement management as part of target state.
• Documentation & handover — deliver runbooks and a clean handover to operations.

Skills

Microsoft Entra ID migration

PowerShell scripting

Zero Trust security

OAuth 2.0 / OIDC

Migration design to Entra ID

Tools

Microsoft Entra Connect

Entra Cloud Sync

PowerShell

Microsoft Graph PowerShell SDK

Job description

IAM Consultant/Developer (Microsoft Entra ID) - UK, fully remote

Department: Services

Employment Type: Contract

Location: Remote, UK

Description

About Us

Colibri Digital is a specialist consultancy delivering advanced Data, AI and Cloud solutions for clients across financial services, healthcare, government and enterprise technology sectors.

We help organisations build intelligent, scalable and production-grade data platforms that drive measurable business outcomes. We work closely with our clients to move beyond experimentation and into real-world AI and data transformation delivery. Our Consultants operate as trusted advisors and technical leaders within client environments, combining deep technical expertise with strong stakeholder engagement and delivery capability.

The Role

We're looking for a hands‑on IAM Consultant/Developer to join Colibri Digital on client engagement, supporting a major Microsoft Entra ID implementation.

This is a hands‑on delivery role requiring someone who can combine IAM architecture and design with practical implementation experience. You’ll play a key role in delivering the migration to Microsoft Entra ID, working across discovery, target state design, migration execution, security and handover.

This is not a steady‑state IAM administration role. We're looking for someone who has previously delivered complex identity migration/implementation projects and is comfortable operating within a fast‑paced client consulting environment.

What You'll Be Doing

• Discovery & design — audit the existing identity estate (on-prem AD, and/or third‑party IdP such as Okta or Ping) and design the target‑state architecture in Microsoft Entra ID.
• Migration execution — plan and run the cutover, including phased/staged migration approaches to minimise disruption to live services.
• Hybrid identity — configure and manage synchronization between on-prem and cloud using Microsoft Entra Connect or Entra Cloud Sync during the transition period.
• Authentication & security — implement MFA, Conditional Access policies, and passwordless sign‑in aligned to Zero Trust principles.
• Application integration — migrate or re-establish SSO for enterprise applications using SAML, OAuth 2.0, and OIDC.
• Identity governance — stand up Privileged Identity Management (PIM), Entitlement Management (access packages), and Access Reviews as part of the target state.
• Cutover support & troubleshooting — monitor sign‑in/audit logs and identity protection signals during and after migration to catch issues early.
• Documentation & handover — leave the operations team with clear runbooks and a clean handover once migration is complete.

What We’re Looking For

Essential:

• Proven experience delivering a migration onto Microsoft Entra ID (formerly Azure AD) — from on‑prem AD DS or from a third‑party IdP (Okta, Ping, ForgeRock, etc.).
• Demonstrable Experience owning migrations of large user bases (500k+)
• Strong working knowledge of Conditional Access, Zero Trust security models, and modern authentication protocols (SAML 2.0, OAuth 2.0, OIDC).
• Experience with DNS, TLS certificates and Load Balancers.
• Confident PowerShell scripting for identity lifecycle automation, ideally via the Microsoft Graph PowerShell SDK.
• Comfortable working independently and communicating migration risk/status to non‑technical stakeholders.

Desirable:

• KQL for log analysis in Microsoft Sentinel or Azure Monitor.
• Experience with Entra ID B2B/B2C.
• Background with an alternative IAM platform (ForgeRock, Ping, Okta) — genuinely useful for migration work, since you understand what you’re migrating from, not just what you’re migrating to.
• Experience with API Gateway, API Management platforms

Certifications (nice to have, not mandatory):

• SC-300 (Identity and Access Administrator Associate)
• SC-100 (Cybersecurity Architect Expert)
• SC-500 (Cloud and AI Security Engineer Associate)
• CISSP