Devoteam Cyber Trust | IAM Engineer | Banking Sector

Devoteam | Cyber Trust; Lisboa; On-site; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Professional development

Growth opportunities

Collaborative culture

Job summary

Devoteam Cyber Trust, the cybersecurity specialist arm of the Devoteam Group in Portugal, is seeking a seasoned IAM Specialist to secure our identity infrastructure in a regulated banking environment. You will maintain on-prem AD and Microsoft Entra ID across hybrid environments.

You will implement Conditional Access, MFA, PIM, automate tasks with PowerShell and Graph API, and collaborate with Cyber Security, Infrastructure and App teams to ensure compliance and robust access governance.

Qualifications

• Experience managing on-premises Active Directory and Microsoft Entra ID (Azure AD).
• Knowledge of Kerberos, SAML 2.0, OAuth2, and OpenID Connect (OIDC).
• Experience with Microsoft Entra Connect and hybrid infrastructure troubleshooting.

Responsibilities

• Administer, maintain, and support on-premises Active Directory and Microsoft Entra ID.
• Manage identity synchronization via Microsoft Entra Connect.
• Implement Conditional Access, MFA, and Privileged Identity Management.
• Oversee Joiner-Mover-Leaver lifecycle to minimize risk.
• Automate provisioning and governance with PowerShell and Graph API.
• Collaborate with Cyber Security, Infrastructure, and App teams on identity governance.
• Ensure banking regulations and audit standards compliance.
• Document IAM processes, architecture, and configurations.

Job description

Devoteam Cyber Trust is the Cybersecurity specialist arm of the Devoteam Group. With our 800+ experts located across EMEA, we aim to establish cybersecurity as an enabler of business success rather than a gatekeeper. We leverage an end-to-end approach to Cyber Resilience, Applied Security, and Managed Security services to secure the tech journey of large and medium-sized companies from all sectors and industries.

Since 2009, previously known as INTEGRITY, our team based in Portugal is specialised in providing cutting-edge Managed Security Services that combine its expertise and proprietary technology to consistently and effectively reduce the cyber risk of our clients. The comprehensive service range includes Persistent Intrusion Testing, ISO 27001, PCI-DSS, GRC Consulting and Solutions, and Third-Party Risk Management. ISO 27001 (Information Security) and ISO 9001 (Quality) certified, PCI-QSA, and member of CREST and CIS - Centre for Internet Security, we provide services to a considerable number of clients, operating in more than 20 countries.

Job Description

We are seeking a seasoned Identity & Access Management (IAM) Specialist to oversee and secure our identity infrastructure within a highly regulated banking environment. In this role, you will play a key part in maintaining the security, continuity, and compliance of our critical authentication and authorization systems across hybrid environments integrating on-premises Active Directory (AD) and Microsoft Entra ID (formerly Azure AD).

Key Responsibilities

• Identity Management & Operations: Administer, maintain, and support on-premises Active Directory and Microsoft Entra ID to ensure seamless, secure access control.
• Hybrid Synchronization: Manage identity synchronization and lifecycle integration via Microsoft Entra Connect (Azure AD Connect).
• Access Control & Zero Trust Security: Implement and enforce Conditional Access policies, Multi-Factor Authentication (MFA), and Privileged Identity Management (PIM) to safeguard sensitive banking assets.
• Lifecycle Management: Oversee and optimize the full Joiner-Mover-Leaver (JML) identity lifecycle to minimize security risks and ensure operational effectiveness.
• Automation: Automate routine administrative tasks, identity provisioning, and governance routines using PowerShell and the Microsoft Graph API.
• Cross-Functional Collaboration: Partner with Cyber Security, Infrastructure, and Application teams to define, align, and refine identity governance and access control policies.
• Regulatory Compliance & Audit: Ensure strict adherence to banking regulations, security frameworks, and internal/external audit standards.
• Documentation: Create and maintain comprehensive documentation covering IAM processes, operational procedures, architecture, and configurations.

Qualifications

• Core Identity: Proven hand-on experience managing on-premises Active Directory and Microsoft Entra ID (Azure AD).
• Authentication Protocols: Strong knowledge of modern and legacy authentication protocols, including Kerberos, SAML 2.0, OAuth2, and OpenID Connect (OIDC).
• Hybrid Infrastructure: Solid background in configuring, maintaining, and troubleshooting Microsoft Entra Connect.
• Automation & Scripting: High proficiency in PowerShell scripting and familiarity with Microsoft Graph API for task automation.
• Security Controls: Practical expertise with Conditional Access, MFA, PIM, and Identity Governance.
• Ecosystem Integration: Working knowledge of the broader Microsoft 365 ecosystem, Microsoft Intune, and identity integration patterns.
• Security Frameworks: Strong understanding of security principles, particularly Zero Trust Architecture and Least Privilege Access in financial institutions.

Value-Add Qualifications & Soft Skills

• Certifications: Microsoft Certified: Identity and Access Administrator Associate (SC-300), Azure Administrator Associate (AZ-104), or Security Fundamentals (SC-900).
• Banking / Enterprise Scale: Prior experience working in medium-to-large hybrid environments within banking or financial services.
• Analytical Mindset: Strong problem-solving skills, methodical troubleshooting approach, and high attention to detail.
• Soft Skills: Excellent communication skills, stakeholder management capabilities, and a collaborative team spirit.

Additional Information

What we offer:

• Professional development and monitoring talent;
• Commitment to our employees' development;
• Collaboration in a company that is constantly growing and evolving;
• Strong organisational culture: collaboration, sharing, flexibility, integrity and low ego.

The Devoteam Group works for equal opportunities, promoting its employees based on merit and actively fights against all forms of discrimination. We are convinced that diversity contributes to the creativity, dynamism and excellence of our organization. All of our vacancies are open to people with disabilities.