Senior Microsoft Entra IAM Engineer

Hippo; Leeds; On-site; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Contributory Pension

25 days holiday

Perkbox discounts

Critical illness cover

Life assurance

Volunteer days

Cycle-to-work

EV salary sacrifice

Season ticket loans

Wellbeing sessions

Private health cover

Private dental cover

Additional pension contributions

Extra holidays

Wellbeing contribution

Charity contributions

Tree planting

Job summary

Hippo is seeking a Senior Microsoft Entra IAM Engineer to join our Managed Services Team. You will configure, automate and support access review capabilities across Microsoft Entra, Azure and the wider Microsoft ecosystem.

You will implement secure CI/CD pipelines for IAM scripts, ingest and reconcile identity data, and partner with governance analysts to translate policy into technical designs, ensuring traceability and auditability.

Qualifications

• Hands-on IAM engineering in Entra ID and Azure.
• Experience with Access Reviews, Entitlement Management or PIM.
• Automation using Graph and PowerShell.
• REST APIs and identity data from multiple sources.
• Designing CI/CD pipelines in Azure DevOps with source control.
• Strong understanding of authentication, authorization and RBAC.
• Production automation support including monitoring and incident response.

Responsibilities

• Configure, support and enhance user access review capabilities using Microsoft Entra ID Governance and related services.
• Build and maintain automation using Graph, PowerShell and APIs.
• Ingest, transform and reconcile identity, entitlement and ownership data for review campaigns.
• Develop secure CI/CD pipelines and deployment controls for IAM scripts.
• Monitor scheduled processes, troubleshoot failures and implement robust logging and recovery.
• Apply least-privilege and privileged-access controls to engineering solutions.
• Collaborate with governance analysts to translate requirements into designs.
• Create technical documentation, runbooks and handover materials.

Skills

Identity and access management

Microsoft Entra ID

Azure environments

PowerShell

Microsoft Graph

REST APIs

RBAC

Least privilege

Audit and governance

CI/CD pipelines

Education

Microsoft Identity Certification

Tools

Azure DevOps

Microsoft Graph

Job description

Hippo is a rapidly growing digital consultancy passionate about building and delivering transformative digital solutions. We are recruiting for a Senior Microsoft Entra IAM Engineer to join our Hippo Herd as part of our Managed Services Team. We work at the intersection of strategy, design and technology to solve complex problems and create lasting value.

As a Senior Microsoft Entra IAM Engineer within the User Access Reviews (UAR) team, you will provide hands-on engineering for identity governance operations. You will configure, automate and support access review capabilities, integrate data from multiple sources, and build reliable delivery pipelines that reduce manual effort while preserving security, traceability and auditability.

You will act as a Senior Consultant and trusted Microsoft identity specialist. Working in partnership with an IAM Governance Analyst, you will translate operational and control needs into supportable technical solutions across Microsoft Entra, Azure and the wider Microsoft ecosystem.

This role suits an engineer who is equally comfortable improving a live service, diagnosing identity-data problems and applying software engineering practices to secure automation.

Your Role in a Nutshell

• Configure, support and enhance user access review capabilities using Microsoft Entra ID Governance and associated Microsoft services.
• Build and maintain automation using Microsoft Graph, PowerShell, APIs and appropriate Azure services.
• Ingest, transform and reconcile identity, application, entitlement and ownership data required for review campaigns.
• Develop secure CI/CD pipelines, source-control practices, automated testing and deployment controls for IAM scripts and configuration.
• Monitor scheduled processes, troubleshoot failures and implement resilient logging, alerting, retry and recovery patterns.
• Apply least-privilege, secrets-management and privileged-access controls to engineering and operational solutions.
• Partner with governance analysts to turn process, policy and audit requirements into maintainable technical designs.
• Create technical documentation, runbooks and handover materials, and contribute to service reporting and continuous improvement.

Essential Experience

• Strong hands-on experience engineering identity and access management solutions in Microsoft Entra ID and Azure environments.
• Practical experience with Microsoft Entra ID Governance capabilities such as Access Reviews, Entitlement Management or Privileged Identity Management.
• Experience automating Microsoft cloud administration using Microsoft Graph and PowerShell.
• Ability to work with REST APIs, structured data formats and identity data from multiple authoritative or target systems.
• Experience designing and maintaining CI/CD pipelines in Azure DevOps or an equivalent platform, including source control and peer review.
• Strong understanding of authentication, authorisation, RBAC, least privilege, service principals and managed identities.
• Experience supporting production automation, including monitoring, incident investigation, defect resolution and controlled change.
• Clear communication skills and the ability to collaborate with analysts, security specialists, application teams and client stakeholders.

Desirable Experience

• Experience with Infrastructure as Code using Bicep, Terraform or ARM templates.
• Knowledge of hybrid identity, on-premises Active Directory and identity synchronisation patterns.
• Experience with Azure Functions, Logic Apps, Automation Accounts, Key Vault, Log Analytics or similar Azure services.
• Understanding of audit evidence, access recertification controls and regulated operational environments.
• Microsoft Certified: Identity and Access Administrator Associate or comparable Microsoft identity/security certification.

Alongside working with some of the most talented people out there and on-top of a competitive salary, which we’re transparent about from the outset, you can also expect a range of benefits:

• Contributory Pension Scheme (Hippo 6% & Employee 2%)
• 25 Days Holiday plus UK Public Holidays
• Perkbox access for a wide range of discounts
• Critical illness cover
• Life assurance and death in service cover
• Volunteer days
• Cycle-to-work scheme for the avid cyclists
• Salary sacrifice electric vehicles scheme
• Season ticket loans
• Financial and general wellbeing sessions
• Flexible benefits scheme with options of:
• Private health cover
• Private dental cover
• Additional company pension contributions
• Additional holidays (up to an extra 2 days)
• Wellbeing contribution
• Charity contributions
• Tree planting

Diversity, Inclusion and Belonging at Hippo

At Hippo, we’re dedicated to creating a diverse, equitable and inclusive workplace that works for everyone. We understand that having a diverse team unlocks our capacity for innovation, creativity and problem solving. Only by building a community of diverse perspectives, cultures and socio-economic backgrounds can we create an environment where all can contribute and thrive.

We actively encourage applications from underrepresented groups including women, ethnic minorities, LGBTQ+, neurodivergent and people with disabilities. We are committed to providing an inclusive and accessible recruitment process that reflects our workplace culture. We are a registered Disability Confident Employer, Mindful Employer, Endometriosis Friendly Employer and a member of the Armed Forces Covenant. Hippo continually strives to remove barriers, provide accommodations and offer reasonable adjustments to ensure equity throughout our practices.

Hi, we’re Hippo

At Hippo, we design with empathy and build for impact. We do this by combining data-informed evidence, human-centred design and software engineering. We're a digital services partner who is genuinely invested in helping our clients thrive as modern organisations. Our delivery methodology is truly agile, from concept to reality, supporting innovation and continuous improvement to achieve your desired outcomes.

We firmly believe that technology should serve humanity, not the other way around. We take a human-centred approach to everything we do because we understand that complex problems require a service design approach. This means understanding how users behave and ensuring our solutions work for them in the real world.

Our combination of data, design, and engineering delivers bespoke digital services that make a positive and meaningful impact on organisations and society.

Have a look through our Website at Our Story & Purpose, Our Culture & Values, Case Studies and Our Solutions & Services to find out some more!

Hippo Locations

We are headquartered in Leeds and have offices across the UK in Glasgow, Manchester, Birmingham, London and Bristol. We're on the lookout for top talent nationwide but you need to be located within reasonable travelling distance from one of our offices. Given the dynamic nature of a consulting business, you may be required to work on-site at a Hippo office or at an in/out of town client location for a number of days per week (client dependent) and therefore candidates will need to be open/flexible to travel and working on one of those sites at least 2 days per week. We offer a generous relocation support package of up to £8,000 (please ask for terms and conditions) to help make your move a smooth one.