Devoteam Cyber Trust | IAM Engineer | Banking Sector

Devoteam; Lisboa; Hybrid; EUR 60,000 - 100,000; Full time

Benefits offered by this job

Professional development

Growth culture

Equal opportunities

Job summary

Devoteam seeks an experienced IAM Specialist to secure identity infrastructure within a regulated banking environment. You will manage on-premises AD and Microsoft Entra ID, ensure secure access, and drive hybrid authentication strategy.

Responsibilities include enforcing Conditional Access, MFA, and PIM, and automating tasks via PowerShell and Graph API, while collaborating with Cyber Security, Infra, and App teams to maintain governance and compliance.

Qualifications

• On-premises AD and Entra ID management expertise.
• Knowledge of modern and legacy authentication protocols.
• Experience with Microsoft 365 ecosystem and Graph API.
• Understand Zero Trust concepts in banking environments.
• Hybrid infrastructure experience with Entra Connect.

Responsibilities

• Administer on-premises AD and Microsoft Entra ID to ensure secure access control.
• Manage identity synchronization via Microsoft Entra Connect.
• Enforce Conditional Access, MFA, and PIM for sensitive assets.
• Oversee Joiner-Mover-Leaver lifecycle to minimize risks.
• Automate tasks using PowerShell and Graph API.
• Collaborate with Cyber Security, Infrastructure and Applications teams.
• Ensure compliance with banking regulations and audit standards.
• Document IAM processes, architectures, and configurations.

Skills

Active Directory

Microsoft Entra ID

PowerShell

MFA

Conditional Access

PIM

Identity Governance

Zero Trust

OAuth2

SAML 2.0

OIDC

Azure AD Connect

Microsoft Graph API

Tools

Azure AD Connect

Job description

• Full-time
• Contract type: Permanent contract

Company Description

Devoteam Cyber Trust is the Cybersecurity specialist arm of the Devoteam Group. With our 800+ experts located across EMEA, we aim to establish cybersecurity as an enabler of business success rather than a gatekeeper. We leverage an end-to-end approach to Cyber Resilience, Applied Security, and Managed Security services to secure the tech journey of large and medium-sized companies from all sectors and industries.

Since 2009, previously known as INTEGRITY, our team based in Portugal is specialised in providing cutting-edge Managed Security Services that combine its expertise and proprietary technology to consistently and effectively reduce the cyber risk of our clients. The comprehensive service range includes Persistent Intrusion Testing, ISO 27001, PCI-DSS, GRC Consulting and Solutions, and Third-Party Risk Management. ISO 27001 (Information Security) and ISO 9001 (Quality) certified, PCI-QSA, and member of CREST and CIS - Centre for Internet Security, we provide services to a considerable number of clients, operating in more than 20 countries.

Job Description

We are seeking a seasoned Identity & Access Management (IAM) Specialist to oversee and secure our identity infrastructure within a highly regulated banking environment. In this role, you will play a key part in maintaining the security, continuity, and compliance of our critical authentication and authorization systems across hybrid environments integrating on-premises Active Directory (AD) and Microsoft Entra ID (formerly Azure AD).

Key Responsibilities

Identity Management & Operations: Administer, maintain, and support on-premises Active Directory and Microsoft Entra ID to ensure seamless, secure access control.

Hybrid Synchronization: Manage identity synchronization and lifecycle integration via Microsoft Entra Connect (Azure AD Connect).

Access Control & Zero Trust Security: Implement and enforce Conditional Access policies, Multi-Factor Authentication (MFA), and Privileged Identity Management (PIM) to safeguard sensitive banking assets.

Lifecycle Management: Oversee and optimize the full Joiner-Mover-Leaver (JML) identity lifecycle to minimize security risks and ensure operational effectiveness.

Automation: Automate routine administrative tasks, identity provisioning, and governance routines using PowerShell and the Microsoft Graph API.

Cross-Functional Collaboration: Partner with Cyber Security, Infrastructure, and Application teams to define, align, and refine identity governance and access control policies.

Regulatory Compliance & Audit: Ensure strict adherence to banking regulations, security frameworks, and internal/external audit standards.

Documentation: Create and maintain comprehensive documentation covering IAM processes, operational procedures, architecture, and configurations.

Qualifications

Core Identity: Proven hands-on experience managing on-premises Active Directory and Microsoft Entra ID (Azure AD).

Authentication Protocols: Strong knowledge of modern and legacy authentication protocols, including Kerberos, SAML 2.0, OAuth2, and OpenID Connect (OIDC).

Hybrid Infrastructure: Solid background in configuring, maintaining, and troubleshooting Microsoft Entra Connect.

Automation & Scripting: High proficiency in PowerShell scripting and familiarity with Microsoft Graph API for task automation.

Security Controls: Practical expertise with Conditional Access, MFA, PIM, and Identity Governance.

Ecosystem Integration: Working knowledge of the broader Microsoft 365 ecosystem, Microsoft Intune, and identity integration patterns.

Security Frameworks: Strong understanding of security principles, particularly Zero Trust Architecture and Least Privilege Access in financial institutions.

Value-Add Qualifications & Soft Skills

Certifications: Microsoft Certified: Identity and Access Administrator Associate (SC-300), Azure Administrator Associate (AZ-104), or Security Fundamentals (SC-900).

Banking / Enterprise Scale: Prior experience working in medium-to-large hybrid environments within banking or financial services.

Analytical Mindset: Strong problem-solving skills, methodical troubleshooting approach, and high attention to detail.

Soft Skills: Excellent communication skills, stakeholder management capabilities, and a collaborative team spirit.

Additional Information

What we offer:

• Professional development and monitoring talent;
• Commitment to our employees' development;
• Collaboration in a company that is constantly growing and evolving;
• Strong organisational culture: collaboration, sharing, flexibility, integrity and low ego.

The Devoteam Group works for equal opportunities, promoting its employees based on merit and actively fights against all forms of discrimination. We are convinced that diversity contributes to the creativity, dynamism and excellence of our organization. All of our vacancies are open to people with disabilities.