IAM Engineer/Analyst - London - (1-2 days a week)

Investigo; Greater London; Hybrid; GBP 50,000 - 80,000; Full time

Benefits offered by this job

Discretionary bonus

Job summary

Investigo is working with a London-based organisation maturing its IT security posture. The role targets an IAM analyst/engineer to own IAM, PAM and PIM, centralising policies, user access and permissions, with progression into IAM/PAM tooling and zero trust.

You will work directly with the CISO, GRC consultant and Infrastructure/cloud teams, gaining exposure across endpoints, identity governance and cloud services.

Qualifications

• Advanced practical knowledge of Microsoft Entra ID, Microsoft 365, Azure, Microsoft Intune, Azure Virtual Desktop and Windows 365 Cloud PC.
• Hands-on experience implementing CA, MFA, SSO, SAML, federated identity and PAM controls.
• Experience with identity solutions for employees, partners and customers and lifecycle management.

Responsibilities

• Own IAM/PAM/PIM across the organisation and centralise policies and procedures.
• Engage with Infrastructure, GRC and security teams to improve identity controls.
• Support Entra ID engineering, hybrid identity, Conditional Access and end-user experience.
• Ensure identity and access processes meet standards, risk treatments and audits.

Skills

Entra ID

Azure Active Directory

Conditional Access

MFA

Zero Trust

Tools

Microsoft Intune

Azure

Azure Virtual Desktop

Windows 365 Cloud PC

SAML

Job description

I am currently working with an organisation who are building out/maturing their IT security posture from group level. The client has completed a 3-5yr strategy and identified a need for an IAM analyst/engineer to work closely with the infrastructure team and own IAM/PAM/PIM, initially working on centralising policies/procedures, user access, permissions and then moving on to other areas of the strategy such as IAM/PAM tools and zero trust. This would be a fantastic opportunity for someone with broad knowledge across IAM at analyst/engineer level to develop further by having focus and opportunity to learn more within this role, working directly with the CISO, GRC consultant and Infrastructure/cloud team.

Main duties/responsibilities

Help support the group’s identity, access and MS security controls.Hands on support to move away from legacy Active Directory dependencies, strengthen Entra ID and privileged access controls, adopt Zero Trust principles and better leverage Microsoft E5 capabilities and automation opportunities.Hands‑on engineering for Microsoft Entra ID, hybrid identity, Conditional Access, MFA, Privileged Identity Management, User Access Reviews and other identity governance controls.Apply in-depth specialised knowledge to solve moderately complex identity and access control issues across infrastructure, endpoint and cloud services, for all Human, and Non‑human IdentitiesEnsure identity and access processes, systems and controls remain compliant with approved standards, risk treatments and audit requirements.Work with Infrastructure, Group Information Security and service partners to improve endpoint and identity controls, operational processes and end user experience.

Key skills/background/experience

Advanced practical knowledge of Microsoft Entra ID, Microsoft 365, Azure, Microsoft Intune, Azure Virtual Desktop and Windows 365 Cloud PC, including how these services support secure endpoint, cloud desktop and identity operations.Strong hands‑on experience implementing Conditional Access, MFA, Single Sign‑On, SAML, federated identity, Privileged Identity Management, user access reviews, entitlement management, RBAC and privileged access management controls.Experience supporting employee and customer identity solutions, including lifecycle management, authentication patterns, identity federation, external identity integration and secure access for workforce, partner and customer facing services.Experience with certificate management and public key infrastructure concepts Side notesHybrid, ideally 2 days a week central London, maybe reduced to 1 day.Discretionary bonus attached to this roleSalary range is between £50,000-£80,000 (Depending on experience/seniority/relevance to role)