MFA Engineer

Talent Smart; Sheffield; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

Talent Smart is partnering with a leading financial services client on a strategic Identity and Access Management transformation programme and are looking for an experienced MFA Engineer to help deliver modern authentication capabilities across a complex enterprise environment.

This is a hands‑on engineering role requiring strong experience across MFA, IAM and authentication technologies, alongside the ability to work effectively with architecture, cybersecurity, application and infrastructure

Qualifications

• Strong hands-on experience engineering MFA and SSO within enterprise IAM environments.
• Deep understanding of modern authentication and federation protocols, particularly OIDC/OAuth2 and SAML
• Experience with at least one enterprise Identity Provider platform
• Strong understanding of authentication vs authorisation, identity lifecycle and trust boundaries
• Working knowledge of PKI, certificates, TLS and key management
• Experience operating production IAM services, including monitoring, incident and change management
• Strong communication and stakeholder management skills, with the confidence to challenge and influence technical decisions
• Ability to work across architecture, cybersecurity, infrastructure and application teams
• Desirable: Entra ID / Azure AD experience
• Desirable: FIDO2/WebAuthn and phishing‑resistant MFA experience
• Desirable: PowerShell and/or Python scripting and API experience
• Desirable: Zero Trust and adaptive/risk‑based authentication knowledge
• Desirable: PAM and privileged authentication experience
• Desirable: Cloud and hybrid identity experience across Azure, AWS or GCP
• Desirable: Experience in financial services or other regulated environments
• Desirable: Relevant IAM, security or Microsoft Identity certifications

Skills

MFA engineering

SSO

IAM environments

OIDC/OAuth2

SAML

PKI/TLS

incident management

stakeholder management

Job description

• Contract: Inside IR35
• Location: Remote-based, with the potential requirement to work from Sheffield 2-days per week if a new office policy is introduced.

We're partnering with a leading financial services client on a strategic Identity and Access Management transformation programme and are looking for an experienced MFA Engineer to help deliver modern authentication capabilities across a complex enterprise environment.

This is a hands‑on engineering role requiring strong experience across MFA, IAM and authentication technologies, alongside the ability to work effectively with architecture, cybersecurity, application and infrastructure teams.

Key Requirements:

• Strong hands‑on experience engineering MFA and SSO within enterprise IAM environments
• Deep understanding of modern authentication and federation protocols, particularly OIDC/OAuth2 and SAML
• Experience with at least one enterprise Identity Provider platform
• Strong understanding of authentication vs authorisation, identity lifecycle and trust boundaries
• Working knowledge of PKI, certificates, TLS and key management
• Experience operating production IAM services, including monitoring, incident and change management
• Strong communication and stakeholder management skills, with the confidence to challenge and influence technical decisions
• Ability to work across architecture, cybersecurity, infrastructure and application teams

Desirable:

• Entra ID / Azure AD experience
• FIDO2/WebAuthn and phishing‑resistant MFA experience
• PowerShell and/or Python scripting and API experience
• Zero Trust and adaptive/risk‑based authentication knowledge
• PAM and privileged authentication experience
• Cloud and hybrid identity experience across Azure, AWS or GCP
• Experience in financial services or other regulated environments
• Relevant IAM, security or Microsoft Identity certifications

This is a key opportunity to play a hands‑on role in a major enterprise IAM transformation, helping shape and deliver the future of authentication across a complex financial services environment.