Microsoft Identity Engineer

JR United Kingdom; Stoke-on-Trent; On-site; GBP 45,000 - 70,000; Full time

Job summary

A leading FinTech software company is looking for a Microsoft Identity Engineer to enhance enterprise access governance. You will design secure and automated workflows for a diverse user base while ensuring compliance with regulations. The role requires expertise in PIM, PAM, and Azure automation tools.

Responsibilities

• Design & automate Azure RBAC: create least privilege models, automate role assignments.
• Manage PIM policies: implement controls using Azure AD PIM for privilege escalation.
• Develop PAM workflows: use Microsoft Defender for Identity to secure access paths.

Skills

Microsoft PIM

Microsoft PAM

Terraform

Bicep

ARM

PowerShell

Job description

Social network you want to login/join with:

Microsoft Identity Engineer, Stoke-on-Trent

Client: Prism Digital

Location: Stoke-on-Trent, United Kingdom

Job Category: Other

-

EU work permit required: Yes

Job Views: 2

Posted: 10.06.2025

Expiry Date: 25.07.2025

Job Description:

Microsoft Identity Engineer | Entra ID, PIM, PAM, PowerShell Automation | FinTech Software Company

• 4 month contract

Our client is seeking a Microsoft Identity Engineer with expertise in Azure RBAC and PIM/PAM automation to develop and enforce enterprise-wide access governance. You will work within a collaborative IT team, designing secure, compliant, and automated workflows for over 700 users and 150 vendors.

This position is suitable for someone experienced in complex environments who can facilitate seamless secure access.

Key Skills:

• Microsoft PIM
• Microsoft PAM
• Terraform or Bicep or ARM + PowerShell

Responsibilities:

• Design & automate Azure RBAC: create least privilege models, automate role assignments, prevent over-permissioning
• Manage PIM policies: implement controls using Azure AD PIM for privilege escalation
• Develop PAM workflows: use Microsoft Defender for Identity and other tools to secure access paths
• Automate user lifecycle: handle provisioning, deprovisioning, access reviews, and role audits with Entra and Logic Apps
• Monitor & alert: utilize Sentinel, Log Analytics, Azure Monitor to detect issues early
• Enforce policies & governance: ensure compliance with ISO 27001, NIST, GDPR
• Collaborate & document: work with DevSecOps, application owners, GRC teams to establish secure design patterns

If interested, contact us promptly as the client is ready to hire.