Senior IAM & Identity Security Engineer - Hybrid

FSP; Glasgow; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid working

Industry leading coaching and Ment or

Job summary

FSP is seeking a Senior Identity Security Engineer to design, implement and enhance large‑scale identity environments across Microsoft AD, Entra ID, PKI/ADCS, and hybrid platforms.

You will lead secure, scalable identity solutions, integrate third‑party services, and drive passwordless adoption in hybrid cloud contexts. Collaborate with engineering and operations to reduce risk and improve resilience across on‑prem, cloud and cross‑domain environments.

Qualifications

• Deep expertise across Active Directory, Entra ID and PKI/ADCS in large environments.
• Ability to design secure, scalable identity solutions end-to-end.
• Experience with hybrid identity architectures and migrations.
• Strong collaboration with cross-functional teams and stakeholders.
• Familiarity with GDPR, ISO 27001, NIST frameworks is a plus.

Responsibilities

• Design and architect modern Microsoft identity platforms, including new AD and Entra ID environments, roadmaps and secure foundations.
• Integrate third-party identity services such as Okta, Ping, Duo, Auth0 and Yubico.
• Assess and improve existing identity environments by identifying risks, technical debt and reliability issues, and lead engineering work to implement improvements.
• Engineer PKI and certificate lifecycle services at scale, including ADCS design, automation and cloud integrations.
• Plan and lead safe migrations and legacy exits, including decommissioning legacy AD forests, MIM, ADFS.
• Drive adoption of passwordless and modern authentication (Windows Hello, passkeys, FIDO2) and support clients through change.
• Evolve organisations toward cloud-first identity models and hybrid identity strategies.
• Automate identity and certificate operations using IaC, DevSecOps practices.
• Advise clients on IAM best practices, standards and regulatory requirements (GDPR, ISO 27001, NIST).

Skills

Active Directory

Entra ID

PKI/ADCS

Hybrid identity

Security design

Automation (PowerShell)

Tools

PowerShell

CI/CD

Infrastructure as Code

Azure

Job description

FSP is seeking a Senior Identity Security Engineer to design, implement and enhance large‑scale identity environments across Microsoft AD, Entra ID, PKI/ADCS, and hybrid platforms.

You will lead secure, scalable identity solutions, integrate third‑party services, and drive passwordless adoption in hybrid cloud contexts. Collaborate with engineering and operations to reduce risk and improve resilience across on‑prem, cloud and cross‑domain environments.