CIAM Developer

Xcede; Porto; Presencial; EUR 50 000 - 70 000; Tempo integral

Resumo da oferta

Xcede is seeking an CIAM Developer in Porto, Portugal for a 12-month contract. You will configure Conditional Access in Microsoft Entra ID, manage dynamic security groups, and automate tasks using PowerShell and Microsoft Graph API.

The role emphasizes deploying policies, analyzing sign-in data, and ensuring secure access governance. Ideal candidates bring hands-on Entra ID CA experience, script proficiency, and a methodical approach to testing and change execution, with strong focus on MFA and

Qualificações

• Hands-on configuration with Entra ID and Conditional Access.
• Experience building dynamic and static security groups.
• Scripting with PowerShell and Graph API for bulk ops.
• Familiarity with MFA and device compliance controls.

Responsabilidades

• Configure and author Conditional Access policies in Entra ID.
• Build and restructure security groups with membership rules.
• Develop automation/scripts using PowerShell and Graph API for bulk ops.
• Deploy policies in report-only mode and analyze sign-ins/logs.
• Tune policy conditions, exclusions, and break-glass setups.
• Execute waves per deployment plan and reconciling access post-migration.
• Support hypercare and troubleshoot access issues.
• Contribute to design documentation with as-built details.

Conhecimentos

Microsoft Entra ID

Conditional Access

PowerShell scripting

Microsoft Graph API

Dynamic membership rules

What-If tooling

MFA & device compliance

Access governance

Ferramentas

PowerShell

Microsoft Graph API

Descrição da oferta de emprego

We are supporting our client in their search for a CIAM Developer. The role will be a 12-month contract.

Key Responsibilities:

• Configure and author Conditional Access policies in Microsoft Entra ID to the agreed naming standard.
• Build and restructure security groups, including static and dynamic membership rules.
• Develop automation and scripts using PowerShell and Microsoft Graph API for bulk operations.
• Deploy all policies in report-only mode and analyse sign-in logs and What-If results.
• Tune policy conditions, exclusions and break-glass configurations before enforcement.
• Execute ring-based enforcement waves in line with the agreed deployment plan.
• Re-point Conditional Access policies and application assignments to target groups.
• Perform access reconciliation before and after migration and evidence the results.
• Support hypercare, troubleshoot access issues and implement rollback where required.
• Contribute as-built configuration detail to the technical design documentation.

Key Skills:

• Hands-on configuration experience with Microsoft Entra ID and Conditional Access.
• Strong PowerShell scripting and Microsoft Graph API experience.
• Experience with Entra ID security groups, dynamic membership rules and app assignments.
• Familiarity with sign-in log analysis, What-If tooling and CA reporting.
• Understanding of MFA, device compliance and legacy authentication blocking.
• Methodical approach to testing, validation and change execution.