Identity & Access Engineer (Entra ID & Hybrid AD)

Planet Paymet; Warszawa; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Planet is seeking an experienced Identity and Access Administrator to own Planet's workforce identity platform across Microsoft Entra ID and on-premises Active Directory. Day to day, you will engineer authentication, access, and governance – joining a world-wide PCI DSS environment with focus on secure, seamless identity management.

You will design and automate JML lifecycles, manage Conditional Access, PIM, and group policy across a hybrid estate, ensuring least-privilege access and auditable

Qualifications

• Hands-on experience with Microsoft Entra ID and Azure AD authentication.
• Strong on-premises Active Directory and hybrid identity experience.
• Experience with Joiner-Mover-Leaver automation and identity lifecycle provisioning.
• Knowledge of Privileged Identity Management (PIM) and privileged access models.
• Strong Group Policy (GPO) design and administration.
• Identity governance experience - access reviews, entitlement management, and certification.
• Strong scripting with PowerShell and the Microsoft Graph API.
• Experience in a regulated, ITIL change-controlled environment (PCI DSS an advantage).
• Microsoft Identity and Access Administrator (SC-300) certification desirable.

Responsibilities

• Engineer and operate Microsoft Entra ID and hybrid on-premises Active Directory.
• Design and automate the Joiner-Mover-Leaver lifecycle and access provisioning.
• Own Conditional Access policies, MFA, and risk-based access to protect users and data.
• Administer Privileged Identity Management (PIM) and least-privilege, just-in-time access for administrative roles.
• Maintain and rationalise Group Policy (GPO) and directory configuration across the hybrid estate.
• Run access reviews, entitlement management, and certification to meet security and compliance requirements.
• Automate identity operations with PowerShell and the Microsoft Graph API.
• Act as the highest escalation point for identity and access incidents and problems.
• Apply identity security standards and support audits in line with PCI DSS and Planet policy.

Skills

Microsoft Entra ID / Azure AD

Active Directory

Joiner-Mover-Leaver automation

Privileged Identity Management (PIM)

Group Policy (GPO)

Identity governance

PowerShell scripting

Microsoft Graph API

PCI DSS awareness

Tools

PowerShell

Microsoft Graph API

Entra Connect

GPO management tools

Job description

Planet is seeking an experienced Identity and Access Administrator to own Planet's workforce identity platform across Microsoft Entra ID and on-premises Active Directory. Day to day, you will engineer authentication, access, and governance – joining a world-wide PCI DSS environment with focus on secure, seamless identity management.

You will design and automate JML lifecycles, manage Conditional Access, PIM, and group policy across a hybrid estate, ensuring least-privilege access and auditable