IAM (IGA BAU) Engineer

Nortal; Poland; On-site; PLN 180,000 - 240,000; Full time

Job summary

Nortal is recruiting an IAM (IGA BAU) Engineer to join an international identity transformation programme. You will help standardise Identity Governance and Administration (IGA) using Microsoft Entra ID Governance, supporting over 34,000 identities across multiple regions.

In a collaborative, self-organising team, you will automate IAM processes, design solution architectures, and ensure governance, security and regulatory compliance are embedded in daily operations.

Qualifications

• At least 3 years of experience in Identity and Access Management or Identity Governance.
• Hands-on with Microsoft Entra ID (Azure AD) and related services.
• Strong understanding of access provisioning, entitlement management, and access reviews.
• Experience supporting and maintaining enterprise IAM solutions.

Responsibilities

• Maintain, improve, and expand the organisation's identity governance capabilities.
• Support rollout of Identity Governance capabilities per programme roadmap.
• Provide L2/L3 support for IAM incidents and changes.
• Design and implement automation to streamline IAM processes.
• Create and maintain technical documentation and solution designs.

Skills

Identity and Access Management

Microsoft Entra ID (Azure AD)

Identity Governance

Analytical thinking

Tools

PowerShell

Bash

Job description

Overview

Join an international identity transformation programme as a IAM (IGA BAU) Engineer, that is redefining how identity and access management is delivered across a global organisation.

As part of a new strategic initiative, you'll help standardise Identity Governance and Administration (IGA) using Microsoft Entra ID Governance, supporting over 34,000 identities across multiple regions. You'll work in a collaborative, self-organising team where automation, security and continuous improvement are at the heart of everything we do.

If you're passionate about modern IAM technologies and enjoy solving complex identity challenges while building scalable, secure solutions, we'd love to hear from you.

Responsibilities

You'll play a key role in maintaining, improving and expanding the organisation's identity governance capabilities. Your work will directly contribute to the delivery of new regional work packages and the continuous evolution of the IAM platform.

You'll:

• Support and enhance Microsoft Entra ID Governance services, including access provisioning, entitlement management and access reviews.
• Manage, monitor and continuously improve IAM services, ensuring high availability and operational excellence.
• Troubleshoot complex identity and access issues across authentication, authorization, accounts and permissions.
• Provide Level 2 and Level 3 support for IAM-related incidents, problems and changes.
• Design and implement automation that simplifies identity processes and reduces manual effort.
• Contribute to the rollout of new Identity Governance capabilities as part of the programme roadmap.
• Create and maintain high-quality technical documentation, including solution designs and configuration guides.
• Work closely with security, audit and compliance teams to ensure IAM services meet governance and regulatory requirements.
• Share knowledge and promote IAM best practices across technical teams.
• Stay up to date with emerging IAM technologies, security trends and industry best practices.

Qualifications

• At least 3 years of experience working with Identity and Access Management or Identity Governance.
• Hands-on experience with Microsoft Entra ID (Azure AD) and services such as:
  • Entra ID Governance
  • Enterprise Applications
  • Conditional Access
  • Microsoft 365
• Strong understanding of Identity Governance concepts, including:
  • Access provisioning
  • Entitlement Management
  • Access Reviews
  • Identity lifecycle management
• Experience supporting and maintaining enterprise IAM solutions.
• Strong analytical and problem-solving skills with a proactive mindset.
• Excellent communication skills and experience working with cross-functional, international teams.
• The ability to prioritise effectively and manage multiple workstreams in a dynamic environment

Nice to have:

• Experience with cloud security and enterprise security solutions.
• Scripting skills (PowerShell or Bash) to automate IAM processes.
• Knowledge of complementary identity technologies such as SSO, MFA or PAM.
• Experience with other IGA platforms such as SailPoint, Saviynt or similar.

*Following the applicable legal regulations, particularly Directive (EU) 2019/1937 of the European Parliament and of the Council on the protection of persons reporting breaches of Union law and its implementation into Polish law under the Act of December 4, 2021, on the Protection of Persons Reporting Breaches of Law (Journal of Laws 2021, item 2105), including Articles 4-6 governing whistleblower protection and reporting procedures, the company has implemented a Whistleblower Support Policy, ensuring anonymity, protection, and support for individuals reporting irregularities.