Microsoft Identity Engineer

JR United Kingdom; Watford; On-site; GBP 40,000 - 65,000; Full time

Job summary

A leading FinTech software company is seeking a Microsoft Identity Engineer in Watford, Hertfordshire. This role involves designing robust and automated access governance systems, focusing on collaboration and security automation across a large user base. Ideal for professionals with deep Azure knowledge and a penchant for optimizing identity management processes.

Qualifications

• Deep expertise in Azure RBAC and PIM/PAM.
• Experience automating workflows and security processes.

Responsibilities

• Architect least privilege access models and automate role assignments.
• Manage escalated privileges using Azure AD PIM.
• Integrate PAM workflows and secure critical access paths.
• Oversee user journey for provisioning and deprovisioning.

Skills

Microsoft PIM

Microsoft PAM

PowerShell Automation

Azure RBAC

Job description

Social network you want to login/join with:

Microsoft Identity Engineer, Watford, Hertfordshire

Client: Prism Digital

Location: Watford, Hertfordshire, United Kingdom

Job Category: Other

EU work permit required: Yes

Job Views:

2

Posted:

10.06.2025

Expiry Date:

25.07.2025

Job Description:

Microsoft Identity Engineer | Entra ID, PIM, PAM, PowerShell Automation | FinTech Software Company

• 4 month contract

Our client is looking for a Microsoft Identity Engineer with deep expertise in Azure RBAC and PIM/PAM automation to shape and enforce enterprise-wide access governance. You’ll work at the core of a highly collaborative IT operations team, designing robust, compliant, and automated workflows across 700+ users and 150+ vendors.

This role is ideal for someone who thrives in complex environments and knows how to make secure access seamless.

Key Skills:

• Microsoft PIM
• Microsoft PAM
• Terraform or Bicep or ARM + PowerShell

What You’ll Be Doing:

• Azure RBAC Design & Automation: architect least privilege access models, automate role assignments and eliminate over-permissioning
• PIM Integration & Oversight: build out policy-driven controls using Azure AD PIM to manage escalated privileges
• PAM Workflows: leverage Microsoft Defender for Identity and other tools to secure critical access paths
• Lifecycle Automation: own the user journey: provisioning, deprovisioning, access reviews, and role audits via Entra and Logic Apps.
• Monitoring & Alerting: surface insights through Sentinel, Log Analytics, and Azure Monitor, detect anomalies before they escalate.
• Policy Enforcement & Governance: ensure everything aligns to internal controls and external standards (ISO 27001, NIST, GDPR)
• Documentation & Collaboration: work closely with DevSecOps, application owners, and GRC teams to build secure-by-design patterns

If this sounds like you, please get in touch quickly as our client is ready to bring you on board!