Identity & Access Analyst

Planet; Warszawa; Hybrid; PLN 150,000 - 250,000; Full time

Job summary

Planet seeks an Identity Platform Engineer to own and secure our workforce identity across Microsoft Entra ID and on-prem Active Directory in a PCI DSS environment. You will engineer authentication, access governance, and automation for Joiner-Mover-Leaver workflows, Conditional Access, and Privileged Identity Management.

In this role you will maintain GPO and directory configurations across a hybrid estate, run access reviews, and automate identity operations with PowerShell and Microsoft Graph

Qualifications

• Deep hands-on experience with Microsoft Entra ID (Azure AD) - authentication, Conditional Access, and identity protection.
• Strong on-premises Active Directory and hybrid identity experience.
• Expertise in Joiner-Mover-Leaver automation and identity lifecycle / provisioning.
• Hands-on Privileged Identity Management (PIM) and privileged access models.
• Strong Group Policy (GPO) design and administration.
• Identity governance experience - access reviews, entitlement management, and certification.
• Strong scripting with PowerShell and the Microsoft Graph API.
• Experience in a regulated ITIL change-controlled environment (PCI DSS an advantage).
• Microsoft Identity and Access Administrator (SC-300) certification desirable.

Responsibilities

• Engineer and operate Microsoft Entra ID and hybrid on-premises Active Directory, including sync, federation, and domain services.
• Design and automate the JML lifecycle and access provisioning; ensure timely, accurate, and auditable joiner, mover, and leaver processing.
• Own Conditional Access policies, MFA, and risk-based access to protect users and data.
• Administer Privileged Identity Management (PIM) and least-privilege, just-in-time access for administrative roles.
• Maintain and rationalise Group Policy (GPO) and directory configuration across the hybrid estate.
• Run access reviews, entitlement management, and certification to meet security and compliance requirements.
• Automate identity operations with PowerShell and the Microsoft Graph API.
• Act as the highest escalation point for identity and access incidents and problems.
• Apply identity security standards and support audits in line with PCI DSS and Planet policy.

Skills

Microsoft Entra ID

Azure AD

Hybrid identity

Joiner-Mover-Leaver automation

Conditional Access

Privileged Identity Management

Group Policy

PowerShell

Microsoft Graph API

PCI DSS awareness

ITIL change control

Tools

Entra Connect

DNS

Site trusts

Job description

About Us

Planet is a leading technology company transforming payments by putting customer experience first. We offer integrated solutions that include payment processing, VAT refunds, dynamic currency conversion, and management services for merchants in the Retail and Hospitality sectors worldwide.

In recent years, we have experienced significant growth, expanding our services and global presence.

With strong private equity investors, Advent International and Eurazeo, we have the financial capital and expertise to grow our capabilities and reach through acquisitions.

Our mission is to create a world of connected commerce where payments are simple, secure, and seamless, enabling our partners to deliver exceptional experiences to their customers.

Role Overview

This role owns Planet’s workforce identity platform across Microsoft Entra ID and on-premises Active Directory. Day to day, you will engineer authentication, access, and governance - Joiner-Mover-Leaver automation, Conditional Access, Privileged Identity Management, and Group Policy - keeping identity secure, compliant, and seamless for a global workforce in a PCI DSS environment.

What you will do

• Identity platform —Engineer andoperateMicrosoft Entra ID and hybrid on-premises Active Directory, including sync, federation, and domain services.




• Joiner-Mover-Leaver —Design and automate the JML lifecycle and access provisioning; ensuretimely,accurate, and auditable joiner, mover, and leaver processing.




• Access & Conditional Access —Own Conditional Access policies, MFA, and risk-based access to protect users and data.




• Privileged access —Administer Privileged Identity Management (PIM) and least-privilege, just-in-time access for administrative roles.




• Group Policy & configuration —Maintain and rationalise Group Policy (GPO) and directory configuration across the hybrid estate.




• Identity governance —Run access reviews, entitlement management, and certification to meet security and compliance requirements.




• Automation —Automate identity operations with PowerShell and the Microsoft Graph API.




• Escalation & 3rd line —Act as the highest escalation point for identity and access incidents and problems.




• Security & compliance —Apply identity security standards and support audits in line with PCI DSS and Planet policy.

Success Measures

Secure, compliant, and automated identity across Entra ID and Active Directory - JML processed accurately and on time, least-privilege enforced through PIM and Conditional Access, and audits passed.

Who you are

• Deep hands-on experience with Microsoft Entra ID (Azure AD) - authentication, Conditional Access, and identity protection.


• Strong on-premises Active Directory and hybrid identity experience (Entra Connect, DNS, sites, trusts).


• Expertisein Joiner-Mover-Leaver automation and identity lifecycle / provisioning.


• Hands-on Privileged Identity Management (PIM) and privileged access models.


• Strong Group Policy (GPO) design and administration.


• Identity governance experience - access reviews, entitlement management, and certification.


• Strong scripting with PowerShell and the Microsoft Graph API.


• Experience in a regulated, ITIL change-controlled environment (PCI DSS an advantage).


• Microsoft Identity and Access Administrator (SC-300) certification desirable.

Why Planet

Planet is an equal opportunity employer where diversity is valued, and all employment is decided based on qualifications, merit, and business need.

At Planet, we embrace a hybrid work model, with three days a week in the office.

Reasonable accommodations may be made in order to allow for an individual to perform the essential functions of this role successfully.