Identity & Access Analyst

Planet Paymet; Warszawa; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Planet is seeking an experienced Identity and Access Administrator to own Planet's workforce identity platform across Microsoft Entra ID and on-premises Active Directory. Day to day, you will engineer authentication, access, and governance – joining a world-wide PCI DSS environment with focus on secure, seamless identity management.

You will design and automate JML lifecycles, manage Conditional Access, PIM, and group policy across a hybrid estate, ensuring least-privilege access and auditable

Qualifications

• Hands-on experience with Microsoft Entra ID and Azure AD authentication.
• Strong on-premises Active Directory and hybrid identity experience.
• Experience with Joiner-Mover-Leaver automation and identity lifecycle provisioning.
• Knowledge of Privileged Identity Management (PIM) and privileged access models.
• Strong Group Policy (GPO) design and administration.
• Identity governance experience - access reviews, entitlement management, and certification.
• Strong scripting with PowerShell and the Microsoft Graph API.
• Experience in a regulated, ITIL change-controlled environment (PCI DSS an advantage).
• Microsoft Identity and Access Administrator (SC-300) certification desirable.

Responsibilities

• Engineer and operate Microsoft Entra ID and hybrid on-premises Active Directory.
• Design and automate the Joiner-Mover-Leaver lifecycle and access provisioning.
• Own Conditional Access policies, MFA, and risk-based access to protect users and data.
• Administer Privileged Identity Management (PIM) and least-privilege, just-in-time access for administrative roles.
• Maintain and rationalise Group Policy (GPO) and directory configuration across the hybrid estate.
• Run access reviews, entitlement management, and certification to meet security and compliance requirements.
• Automate identity operations with PowerShell and the Microsoft Graph API.
• Act as the highest escalation point for identity and access incidents and problems.
• Apply identity security standards and support audits in line with PCI DSS and Planet policy.

Skills

Microsoft Entra ID / Azure AD

Active Directory

Joiner-Mover-Leaver automation

Privileged Identity Management (PIM)

Group Policy (GPO)

Identity governance

PowerShell scripting

Microsoft Graph API

PCI DSS awareness

Tools

PowerShell

Microsoft Graph API

Entra Connect

GPO management tools

Job description

About Us Planet is a leading technology company transforming payments by putting customer experience first. We offer integrated solutions that include payment processing, VAT refunds, dynamic currency conversion, and management services for merchants in the Retail and Hospitality sectors worldwide. In recent years, we have experienced significant growth, expanding our services and global presence. With strong private equity investors, Advent International and Eurazeo, we have the financial capital and expertise to grow our capabilities and reach through acquisitions. Our mission is to create a world of connected commerce where payments are simple, secure, and seamless, enabling our partners to deliver exceptional experiences to their customers.

Role Overview:

This role owns Planet’s workforce identity platform across Microsoft Entra ID and on-premises Active Directory. Day to day, you will engineer authentication, access, and governance - Joiner-Mover-Leaver automation, Conditional Access, Privileged Identity Management, and Group Policy - keeping identity secure, compliant, and seamless for a global workforce in a PCI DSS environment.

What you will do:

• Identity platform —Engineer and operate Microsoft Entra ID and hybrid on-premises Active Directory, including sync, federation, and domain services.
• Joiner-Mover-Leaver —Design and automate the JML lifecycle and access provisioning; ensure timely, accurate, and auditable joiner, mover, and leaver processing.
• Access & Conditional Access —Own Conditional Access policies, MFA, and risk-based access to protect users and data.
• Privileged access —Administer Privileged Identity Management (PIM) and least-privilege, just-in-time access for administrative roles.
• Group Policy & configuration —Maintain and rationalise Group Policy (GPO) and directory configuration across the hybrid estate.
• Identity governance —Run access reviews, entitlement management, and certification to meet security and compliance requirements.
• Automation —Automate identity operations with PowerShell and the Microsoft Graph API.
• Escalation & 3rd line —Act as the highest escalation point for identity and access incidents and problems.
• Security & compliance —Apply identity security standards and support audits in line with PCI DSS and Planet policy.

Success Measures

Secure, compliant, and automated identity across Entra ID and Active Directory - JML processed accurately and on time, least-privilege enforced through PIM and Conditional Access, and audits passed.

Who you are:

• Deep hands-on experience with Microsoft Entra ID (Azure AD) - authentication, Conditional Access, and identity protection.
• Strong on-premises Active Directory and hybrid identity experience (Entra Connect, DNS, sites, trusts).
• Expertise in Joiner-Mover-Leaver automation and identity lifecycle / provisioning.
• Hands‑on Privileged Identity Management (PIM) and privileged access models.
• Strong Group Policy (GPO) design and administration.
• Identity governance experience - access reviews, entitlement management, and certification.
• Strong scripting with PowerShell and the Microsoft Graph API.
• Experience in a regulated, ITIL change‑controlled environment (PCI DSS an advantage).
• Microsoft Identity and Access Administrator (SC-300) certification desirable.

Why Planet

Planet is an equal opportunity employer where diversity is valued, and all employment is decided based on qualifications, merit, and business need. Come and grow your career in the most exciting, fast paced technology market, with a business that delivers feel‑good connected commerce.

Company Background

Planet provides integrated software, payment and technology solutions for its customers in the Hospitality and Retail sectors and worldwide via a network of global Financial Services Partners. Founded over 35 years ago, we have evolved our services, delivering an innovative digital commerce platform that puts customer experience first. With headquarters in London and around 3,000 expert employees located across six continents we serve customers in over 120 markets.

At Planet, we embrace a hybrid work model, with three days a week in the office. Reasonable accommodations may be made in order to allow for an individual to perform the essential functions of this role successfully.