identity Engineer (Entra ID JML)

SGI; Gloucester; On-site; GBP 83,025 - 138,375; Full time

Job summary

SGI is seeking a contract-based SC Cleared Microsoft Engineer in the United Kingdom to manage end-to-end JML processes and administer Microsoft Entra ID (Azure AD). You will handle identity provisioning, MFA/Conditional Access, and access governance while collaborating with HR, Service Desk, Security and Infrastructure teams to ensure smooth onboarding and offboarding.

The role emphasizes automation, robust documentation, and compliance with security and audit requirements.

Qualifications

• Strong experience administering Microsoft Entra ID (Azure AD) including provisioning, group management, role assignments and licensing.
• Proven experience managing JML processes and identity lifecycle in an enterprise environment.
• Good understanding of Identity & Access Management (IAM) principles, access governance and least-privilege security models.
• Hands-on experience with MFA, Conditional Access and Self-Service Password Reset (SSPR).
• Experience provisioning, deprovisioning and handling user access requests with compliance/audit requirements.
• Strong troubleshooting, stakeholder communication, and documentation skills across HR, Service Desk, Security, and Infra teams.

Responsibilities

• Manage end-to-end JML processes including user account creation, modification and removal.
• Administer Microsoft Entra ID (Azure AD) including lifecycle management and licensing.
• Provision, modify and revoke access to enterprise applications per approved requests and policies.
• Configure and support MFA, Conditional Access and SSPR.
• Monitor/login identity, authentication and access issues to minimize user disruption.
• Support identity governance activities: access reviews, recertification campaigns and audits.
• Maintain identity records ensuring security, regulatory and company compliance.
• Automate provisioning and access management to improve efficiency.
• Collaborate with HR, Service Desk, Security and Infrastructure for onboarding, role changes and offboarding.
• Produce and maintain operational documentation, procedures, knowledge articles and service reports.

Skills

Azure AD

JML processes

IAM principles

MFA

Conditional Access

SSPR

Access governance

Audit & compliance

Documentation

Stakeholder communication

Automation

Tools

PowerShell

ServiceNow

Job description

Job Description

For our customer we are looking for an SC Cleared Microsoft Engineer for a contract that will extend beyond its short term initial phase

Your Responsibilities

• Manage end-to-end Joiner, Mover, and Leaver (JML) processes, ensuring timely creation, modification, and removal of user accounts and access rights.
• Administer Microsoft Entra ID, including user lifecycle management, group administration, role assignments, and license management.
• Provision, modify, and revoke access to enterprise applications in accordance with approved access requests and security policies.
• Configure and support identity security controls such as Multi-Factor Authentication (MFA), Conditional Access, and Self-Service Password Reset (SSPR).
• Monitor and troubleshoot identity, authentication, and access-related issues, ensuring minimal disruption to users.
• Support identity governance activities, including access reviews, recertification campaigns, and compliance audits.
• Maintain accurate identity records and ensure adherence to security, regulatory, and company compliance requirements.
• Automate provisioning and access management processes to improve efficiency and reduce manual effort.
• Collaborate with HR, Service Desk, Security, and Infrastructure teams to deliver seamless onboarding, role changes, and offboarding experiences.
• Produce and maintain operational documentation, procedures, knowledge articles, and service reports.

Your Profile

Essential Skills/knowledge/experience

• Strong experience administering Microsoft Entra ID (Azure AD), including user provisioning, group management, role assignments, and licensing.
• Proven experience managing Joiner, Mover, Leaver (JML) processes and identity lifecycle management within an enterprise environment.
• Good understanding of Identity & Access Management (IAM) principles, access governance, and least-privilege security models.
• Hands-on experience with MFA, Conditional Access, Self-Service Password Reset (SSPR), and authentication management.
• Experience supporting identity provisioning, deprovisioning, and user access requests while maintaining compliance and audit requirements.
• Strong troubleshooting, stakeholder communication, and documentation skills with the ability to work across HR, Service Desk, Security, and Infrastructure teams.

Desirable

Skills/knowledge/experience

• Experience with identity governance and administration tools, including automated provisioning and access certification solutions.
• Knowledge of Microsoft 365 security technologies, including Microsoft Defender, Privileged Identity Management (PIM), and Identity Protection.
• Experience integrating HR systems, ServiceNow, or ITSM platforms with Identity and Access Management processes.
• Familiarity with PowerShell scripting and automation for user provisioning, reporting, and access management tasks.
• Understanding of security, compliance, and audit frameworks such as ISO 27001, GDPR, `and Zero Trust principles.

We believe in equal opportunity for all and actively encourage applications from diverse backgrounds, experiences, and perspectives.