Senior Microsoft Identity Engineer (Entra ID and Microsoft 365)

Intelance Digital Enablement Services Ltd.; Greater London; Hybrid; GBP 101,000 - 120,000; Full time

Benefits offered by this job

Remote within the UK

Occasional London days

Part-time blocks for quarterly reviews

IR35 outside confirmation

Job summary

Intelance Digital Enablement Services Ltd. seeks a senior, hands-on engineer to audit and evidence identity and access controls for a UK-regulated investment client.

You will run quarterly access reviews across Microsoft 365 and data platforms, writing scripts to pull permissions and verify changes. Work with delivery leads and client technology teams; remote within the UK with some London days, contracting through own Ltd company, IR35 outside.

Qualifications

• 8 years or more in identity, Microsoft 365 or infrastructure roles, with at least 4 years focused on identity and access.
• Strong hands on experience of Microsoft Entra ID, including groups, guest access and conditional access.
• Deep knowledge of SharePoint and Teams permissions, including sharing links and inherited access.
• Confident writing PowerShell and using Microsoft Graph.
• Able to read and query permissions with SQL. Snowflake experience is a plus.

Responsibilities

• Run access reviews across Microsoft 365, SharePoint, Teams and Entra ID, and record the results.
• Find and fix access that is too broad, such as open SharePoint sites, old guest accounts and unused groups.
• Write PowerShell and Microsoft Graph scripts that pull permissions and repeat the checks each quarter.
• Check access in a cloud data platform such as Snowflake, using SQL.
• Prepare clear evidence packs that show what was checked, what was found and what was fixed.
• Work with the client's system owners to agree changes and make them safely.

Skills

Identity & Access

Microsoft Entra ID

SharePoint permissions

Teams permissions

PowerShell

Microsoft Graph

SQL

Snowflake

Documentation

Right to work in UK

Tools

PowerShell

Microsoft Graph

Snowflake

SQL

Job description

Join the Intelance associate panel. The first engagement is expected to start in November 2026, subject to client approval.

Intelance is a UK advisory firm working on technology governance, cyber security and data governance. We are looking for a senior hands on engineer to check, clean up and evidence who can see what across Microsoft 365 and a cloud data platform, for a UK regulated investment firm. You will work with our delivery lead and the client's own technology team.

Tasks

• Run access reviews across Microsoft 365, SharePoint, Teams and Entra ID, and record the results.
• Find and fix access that is too broad, such as open SharePoint sites, old guest accounts and unused groups.
• Write PowerShell and Microsoft Graph scripts that pull permissions and repeat the checks each quarter.
• Check access in a cloud data platform such as Snowflake, using SQL.
• Prepare clear evidence packs that show what was checked, what was found and what was fixed.
• Work with the client's system owners to agree changes and make them safely.

Requirements

• 8 years or more in identity, Microsoft 365 or infrastructure roles, with at least 4 years focused on identity and access.
• Strong hands on experience of Microsoft Entra ID, including groups, guest access and conditional access.
• Deep knowledge of SharePoint and Teams permissions, including sharing links and inherited access.
• Confident writing PowerShell and using Microsoft Graph.
• Able to read and query permissions with SQL. Snowflake experience is a plus.
• Careful with evidence and clear in writing.
• Right to work in the UK, and able to work through your own limited company.
• Desirable: Microsoft SC-300 or a similar certification, and experience in financial services.

Benefits

• Day rate of £550 to £650, depending on experience.
• Contract role through your own limited company. We expect it to fall outside IR35, and we confirm this before you start.
• Project based, with blocks of 8 to 12 days for each quarterly review, and more days in the first phase.
• Remote within the UK, with occasional days in London.
• Work alongside a senior delivery lead on a regulated client.
• A place on the Intelance associate panel for future engagements.