Microsoft Identity Engineer

JR United Kingdom; Cambridge; On-site; GBP 80,000 - 100,000; Full time

Job summary

A leading FinTech software company is seeking a Microsoft Identity Engineer on a 4-month contract in Cambridge. This role focuses on shaping enterprise-wide access governance through expertise in Azure RBAC and automation tools. Ideal candidates will thrive in complex environments and contribute to a collaborative IT operations team.

Qualifications

• Deep expertise in Azure RBAC and PIM/PAM automation.
• Experience with Terraform or PowerShell for automation.
• Thrive in complex environments.

Responsibilities

• Architect least privilege access models and automate role assignments.
• Manage escalated privileges using Azure AD PIM.
• Build secure-by-design patterns in collaboration with teams.

Skills

Microsoft PIM

Microsoft PAM

Terraform or Bicep or ARM + PowerShell

Job description

Social network you want to login/join with:

Microsoft Identity Engineer | Entra ID, PIM, PAM, PowerShell Automation | FinTech Software Company

• 4 month contract

Our client is looking for a Microsoft Identity Engineer with deep expertise in Azure RBAC and PIM/PAM automation to shape and enforce enterprise-wide access governance. You’ll work at the core of a highly collaborative IT operations team, designing robust, compliant, and automated workflows across 700+ users and 150+ vendors.

This role is ideal for someone who thrives in complex environments and knows how to make secure access seamless.

Key Skills:

• Microsoft PIM
• Microsoft PAM
• Terraform or Bicep or ARM + PowerShell

What You’ll Be Doing:

• Azure RBAC Design & Automation: architect least privilege access models, automate role assignments and eliminate over-permissioning
• PIM Integration & Oversight: build out policy-driven controls using Azure AD PIM to manage escalated privileges
• PAM Workflows: leverage Microsoft Defender for Identity and other tools to secure critical access paths
• Lifecycle Automation: own the user journey: provisioning, deprovisioning, access reviews, and role audits via Entra and Logic Apps.
• Monitoring & Alerting: surface insights through Sentinel, Log Analytics and Azure Monitor, detect anomalies before they escalate.
• Policy Enforcement & Governance: ensure everything aligns to internal controls and external standards (ISO 27001, NIST, GDPR)
• Documentation & Collaboration: work closely with DevSecOps, application owners, and GRC teams to build secure-by-design patterns

If this sounds like you, please get in touch quickly as our client is ready to bring you on board!

Microsoft Identity Engineer | Entra ID, PIM, PAM, PowerShell Automation | FinTech Software Company