MFA Engineer

Clearly Jobs Ltd.; Sheffield; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

Clearly Jobs Ltd. is partnering with a financial services client to deliver a comprehensive Identity and Access Management transformation.

We are seeking a hands-on MFA Engineer to implement modern authentication capabilities across a complex enterprise environment, working remotely with the possibility of 2 days per week in Sheffield if policy changes. You will collaborate with architecture, cybersecurity, application and infrastructure teams to engineer MFA and SSO, understand federation

Qualifications

• Hands-on experience engineering MFA and SSO within enterprise IAM environments.
• Deep understanding of modern authentication and federation protocols (OIDC/OAuth2, SAML).
• Experience with at least one enterprise Identity Provider platform.
• Strong grasp of authentication vs authorization, identity lifecycle, and trust boundaries.
• Working knowledge of PKI, certificates, TLS and key management.
• Experience operating production IAM services, including monitoring, incident and change management.

Skills

MFA engineering

SSO in IAM

IAM

authentication technologies

stakeholder management

communication skills

Tools

Azure Active Directory (Entra ID)

OAuth2/OIDC

SAML

PowerShell

Python

Job description

• Contract: Inside IR35
• Location: Remote-based, with the potential requirement to work from Sheffield 2-days per week if a new office policy is introduced.

We're partnering with a leading financial services client on a strategic Identity and Access Management transformation programme and are looking for an experienced MFA Engineer to help deliver modern authentication capabilities across a complex enterprise environment.

This is a hands-on engineering role requiring strong experience across MFA, IAM and authentication technologies, alongside the ability to work effectively with architecture, cybersecurity, application and infrastructure teams.

Key Requirements:

• Strong hands-on experience engineering MFA and SSO within enterprise IAM environments
• Deep understanding of modern authentication and federation protocols, particularly OIDC/OAuth2 and SAML
• Experience with at least one enterprise Identity Provider platform
• Strong understanding of authentication vs authorisation, identity lifecycle and trust boundaries
• Working knowledge of PKI, certificates, TLS and key management
• Experience operating production IAM services, including monitoring, incident and change management
• Strong communication and stakeholder management skills, with the confidence to challenge and influence technical decisions
• Ability to work across architecture, cybersecurity, infrastructure and application teams

Desirable:

• Entra ID / Azure AD experience
• FIDO2/WebAuthn and phishing-resistant MFA experience
• PowerShell and/or Python scripting and API experience
• Zero Trust and adaptive/risk-based authentication knowledge
• PAM and privileged authentication experience
• Cloud and hybrid identity experience across Azure, AWS or GCP
• Experience in financial services or other regulated environments
• Relevant IAM, security or Microsoft Identity certifications

This is a key opportunity to play a hands-on role in a major enterprise IAM transformation, helping shape and deliver the future of authentication across a complex financial services environment.