IAM Engineer (ID & Access Engineer)

Crowd Digital Ltd; Manchester; Hybrid; GBP 83,000 - 120,000; Full time

Job summary

Crowd Digital Ltd is seeking an IAM Engineer in Manchester for a 3/6 month contract. You will implement and improve Entra ID and AD controls, deliver SSO, MFA and CA changes, and design RBAC with governance. You will automate lifecycle processes and onboard SaaS apps with federation.

The role requires PowerShell automation skills and producing technical documentation for operations and handover.

Qualifications

• Implement and improve Entra ID and AD controls to meet security and business requirements.
• Deliver SSO, MFA and Conditional Access changes for key apps and user groups.
• Design RBAC and privileged access governance with review and approval processes.
• Improve joiner/mover/leaver lifecycle with automation where possible.

Responsibilities

• Implement and improve Entra ID and AD controls.
• Deliver SSO, MFA and CA changes for prioritized apps/users.
• Design and implement RBAC and identity governance.
• Automate Joiner/Mover/Leaver lifecycle processes.
• Onboard prioritised SaaS apps with federation and provisioning (SAML, OAuth, OIDC, SCIM).
• Develop PowerShell automation and create technical docs for handover.

Skills

IAM

SSO

MFA

PowerShell

RBAC

Identity governance

Education

Bachelor or equivalent

Tools

Microsoft Entra ID

Active Directory

Job description

Identity & Access Management (IAM) Engineer

Length: 3/6 months

SDS: Outside IR35

Rate: £(Apply online only) a day (DOE)

Location: Manchester, 2 days a week

My client is a leader with energy management. They are looking for an IAM Engineer, for an initial 3/6 month contract.

Supporting key stakeholders, you will provide specialist identity and access management engineering expertise to support the acceleration of the Cyber Workstreams.

Key Accountabilities

• To implement and improve Microsoft Entra ID and Active Directory controls so that access is secure, supportable and aligned with business and security requirements.
• Support the delivery and implementation of SSO, MFA and Conditional Access changes for prioritised applications and user groups so that authentication risk is reduced without unnecessary disruption to users.
• Design and implement RBAC, privileged access and identity governance controls so that access is appropriate, traceable and subject to effective review and approval.
• Improvement of the Joiner, Mover and Leaver lifecycle processes, including automation where appropriate, so that access is provisioned, changed and removed accurately and promptly.
• Onboarding of prioritised SaaS applications using federation and automated provisioning, including SAML, OAuth 2.0, OIDC and SCIM, so that applications use consistent and maintainable identity controls.
• Development of PowerShell automation, technical documentation and operational handover materials so that delivered controls can be supported and sustained.

Location: Manchester (2 days a week)

SDS: Inside IR35

Length: 3/6 months

Rate: £(Apply online only) a day (DOE)

We are looking to shortlist with a view to interview this week.

The ideal candidate will be able to start within 1-2 weeks, but we can wait up to 4 weeks for the right candidate