IAM Engineer

Bonhill Partners Ltd; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Bonhill Partners Ltd is seeking an experienced IAM Engineer at AVP level to lead critical identity services in a London-based hybrid environment. You will architect, implement and troubleshoot authentication, federation and access controls across on-premises and cloud platforms, ensuring high availability and security for distributed services. This contract spans 6 months with guaranteed conversion to permanent employment if performance is satisfactory.

Qualifications

• Extensive background with enterprise identity platforms including Active Directory and Entra ID in hybrid environments.
• Experience supporting identity services in large geographically distributed organisations with emphasis on availability and security.
• Strong knowledge of authentication and federation technologies: SAML, OAuth, Kerberos, SSO, MFA, and Conditional Access.
• Hybrid infrastructure with cloud identity services and on-premises directories.
• Experience with application identity integrations and removing legacy integrations when needed.
• Strong troubleshooting across directory, authentication and access issues with ability to drive resolution.
• Experience with Microsoft federation and certificate technologies: ADFS and ADCS.
• Familiarity with identity-focused security practices: ITDR, access reviews, privileged access, suspicious identity activity.
• Experience with directory auditing, monitoring or recovery platforms; Quest Change Auditor or Recovery Manager advantageous.
• Strong automation mindset using PowerShell and/or KQL to simplify administration.
• Experience overseeing reliability of identity services including performance, availability, and alert trends.

Skills

Active Directory

Entra ID

Hybrid environments

SAML

OAuth

Kerberos

SSO

MFA

Conditional Access

PowerShell

KQL

ADFS

ADCS

Troubleshooting

Automation

Identity security

ITDR

Job description

Role: Assistant Vice President – IAM Engineer

Location: London, City - 3-4 days in office.

Details: Initial 6 month contract, with guaranteed conversion to perm within that period.

Requirements:

• Extensive background working with enterprise identity platforms, with strong practical knowledge of Microsoft Active Directory and Entra ID across hybrid environments.
• Experience supporting identity services within large and geographically distributed organisations, where availability, security and access controls are business-critical.
• Strong knowledge of modern authentication and federation technologies, including SAML, OAuth, Kerberos, SSO, MFA and Conditional Access.
• Comfortable working across traditional data-centre based directory infrastructure alongside Microsoft cloud identity services, including the challenges involved in maintaining a hybrid environment.
• Previous involvement with application identity integrations, including bringing new applications onto corporate authentication platforms and removing legacy integrations when required.
• Strong troubleshooting capability across directory, authentication and access issues, with the confidence to investigate complex problems and provide technical direction through to resolution.
• Experience with Microsoft federation and certificate technologies, particularly ADFS and ADCS, would be highly valuable.
• Familiarity with identity-focused security practices, including ITDR, access reviews, privileged access considerations and identifying potentially suspicious identity activity.
• Experience with directory auditing, monitoring or recovery platforms, with exposure to Quest technologies such as Change Auditor or Recovery Manager advantageous.
• Strong automation mindset with the ability to use PowerShell and/or KQL to simplify repetitive administration, improve controls and increase operational efficiency.
• Experience overseeing the reliability of critical identity services, including reviewing platform performance, availability, alerts and operational trends.