Identity & Access Management Engineer

DGH Recruitment Ltd.; United Kingdom; Remote; GBP 70,000 - 90,000; Full time

Job summary

DGH Recruitment Ltd. is seeking an Identity & Access Management Engineer to join a global client’s team in a fully remote role. You will implement, maintain, and support IAM tools and processes across governance, privileged access, authentication, and identity lifecycle management.

The role focuses on Entra ID, SSO, MFA, and federation, with responsibilities for onboarding applications, maintaining documentation, and supporting audit remediation in a remote, globally distributed environment.

Qualifications

• Extensive experience with enterprise IAM solutions across one or more domains (IGA, PAM, SSO, MFA, lifecycle).
• Familiarity with authentication/authorization standards (SAML, OAuth, OIDC, LDAP, Kerberos).
• Experience integrating apps with identity providers and running access governance.

Responsibilities

• Support and administer enterprise IAM platforms and services (IGA, PAM, SSO, MFA).
• Contribute to Zero Trust programs and identity-centric security initiatives.
• Onboard and integrate applications with SAML, OAuth, OIDC, SCIM and federation services.
• Maintain IAM SOPs, documentation, and respond to audit findings.

Skills

Entra ID

SSO

MFA

SAML

OAuth

OIDC

Active Directory

LDAP

Kerberos

Education

CISSP Associate

SC-300

Tools

Microsoft Entra ID

CyberArk

SailPoint

ClearSkye

Okta

Ping Identity

Active Directory

Job description

Identity & Access Management Engineer (Fully Remote)

Key Skills: Entra ID/SSO/MFA/SAML/OAuth/OpenID Connect

DGH Recruitment are currently recruiting on behalf of a leading global client in the professional services industry who are looking for an Identity & Access Management Engineer/IAM Engineer to join the team on a permanent basis.

The role will take responsibility for implementing, maintaining and supporting tools, processes and controls that underpin the Identity and Access Management programme. The successful candidate will help strengthen identity security across Identity Governance, Privileged Access Management, Authentication, Federation, Access Reviews and Identity Threat Detection initiatives.

Core areas of focus

Support and administer enterprise IAM platforms and services covering:

• Identity Governance and Administration (IGA)
• Privileged Access Management (PAM)
• Single Sign-On (SSO)
• Federation
• Multi-Factor Authentication (MFA)
• Passwordless Authentication
• Identity Lifecycle Management

Key responsibilities include

• Implementation and support of modern identity security capabilities including: Microsoft Entra ID, Conditional Access, Privileged Identity Management (PIM), Windows Hello for Business, FIDO2 Authentication and Identity Threat Detection and Response (ITDR)
• Participation in Zero Trust security initiatives and identity-centric security programs
• Support application onboarding and integration activities for: SAML, OAuth, OpenID Connect (OIDC), SCIM Provisioning and Federation Services
• Maintain IAM operational procedures, standards, technical documentation and support guides
• Assist with remediation of audit findings and compliance requirements

Required Skills/Experience

• 5+ years of experience supporting, implementing or administering enterprise IAM solutions, with practical experience in one or more IAM domains such as IGA, PAM, SSO, federation, MFA, lifecycle management or access governance
• Understanding of authentication and authorization standards, including, SAML, OAuth, OpenID Connect (OIDC), LDAP and Kerberos
• Experience with IAM, IGA, PAM or access management platforms such as Active Directory, Microsoft Entra ID, CyberArk, SailPoint, ClearSkye, Okta, Ping Identity or equivalent technologies would be advantageous
• Experience in integrating applications with identity providers and access management solutions
• Experience executing access reviews, role-based access control (RBAC) initiatives and governance activities
• CISSP (Associate), and/or Microsoft Certified: Identity and Access Administrator Associate (SC-300) or equivalent cybersecurity/identity-security focused certification are preferred

Identity & Access Management Engineer (Fully Remote)

In accordance with the Employment Agencies and Employment Businesses Regulations 2003, this position is advertised based upon DGH Recruitment Limited having first sought approval of its client to find candidates for this position.

DGH Recruitment Limited acts as both an Employment Agency and Employment Business