MFA Engineer

Talent Smart; Sheffield; On-site; GBP 70,000 - 105,000; Full time

Benefits offered by this job

Remote-based work

Sheffield office 2 days/week (possible

Hands-on IAM project

Job summary

Talent Smart is seeking an experienced MFA Engineer to support a strategic IAM transformation for a leading financial services client. The role is remote-based with potential Sheffield office 2 days per week, inside IR35.

You will deliver modern authentication capabilities across a complex enterprise, with hands-on MFA, SSO, OIDC/OAuth2 and SAML, collaborating with architecture, cybersecurity, application and infrastructure teams.

Qualifications

• Strong hands-on experience engineering MFA and SSO within enterprise IAM environments.
• Deep understanding of OIDC/OAuth2 and SAML federation.
• Experience with at least one enterprise Identity Provider platform.
• Experience operating production IAM services, including monitoring, incident and change management.
• Excellent communication and stakeholder management; able to influence decisions.

Responsibilities

• Deliver modern authentication capabilities across a complex enterprise IAM environment.
• Collaborate with architecture, cybersecurity, application and infrastructure teams.
• Help shape and deliver the future of authentication within the programme.

Skills

MFA engineering

SSO

OIDC/OAuth2

SAML

Identity Provider

PKI/TLS

IAM operations

Stakeholder comms

Cross-team collaboration

Tools

PowerShell

Python

APIs

Job description

Contract: Inside IR35

Location: Remote-based, with the potential requirement to work from Sheffield 2-days per week if a new office policy is introduced.

We're partnering with a leading financial services client on a strategic Identity and Access Management transformation programme and are looking for an experienced MFA Engineer to help deliver modern authentication capabilities across a complex enterprise environment.

This is a hands-on engineering role requiring strong experience across MFA, IAM and authentication technologies, alongside the ability to work effectively with architecture, cybersecurity, application and infrastructure teams.

Key Requirements:

• Strong hands-on experience engineering MFA and SSO within enterprise IAM environments
• Deep understanding of modern authentication and federation protocols, particularly OIDC/OAuth2 and SAML
• Experience with at least one enterprise Identity Provider platform
• Strong understanding of authentication vs authorisation, identity lifecycle and trust boundaries
• Working knowledge of PKI, certificates, TLS and key management
• Experience operating production IAM services, including monitoring, incident and change management
• Strong communication and stakeholder management skills, with the confidence to challenge and influence technical decisions
• Ability to work across architecture, cybersecurity, infrastructure and application teams

Desirable:

• Entra ID / Azure AD experience
• FIDO2/WebAuthn and phishing-resistant MFA experience
• PowerShell and/or Python scripting and API experience
• Zero Trust and adaptive/risk-based authentication knowledge
• PAM and privileged authentication experience
• Cloud and hybrid identity experience across Azure, AWS or GCP
• Experience in financial services or other regulated environments
• Relevant IAM, security or Microsoft Identity certifications

This is a key opportunity to play a hands-on role in a major enterprise IAM transformation, helping shape and deliver the future of authentication across a complex financial services environment