IAM Engineer: Microsoft Entra & AD (Hybrid)

Zühlke; Porto; Híbrido; EUR 60 000 - 90 000; Tempo integral

Resumo da oferta

Zühlke is seeking an experienced Identity and Access Management Engineer to design, implement, and govern secure IAM solutions across Microsoft Entra ID and Active Directory in a hybrid setup. You’ll drive lifecycle provisioning, SSO/MFA, and RBAC/ABAC models, while automating processes with PowerShell and Graph APIs.

Collaboration with security and IT teams will be essential to maintain Zero Trust principles and strong identity governance.

Qualificações

• Experience in Identity and Access Management or related field.
• Hands-on with Microsoft Entra ID and Active Directory in hybrid environments.
• Knowledge of authentication technologies and standards such as SSO, MFA, and OpenID Connect.
• Familiar with access control models and governance principles including RBAC/ABAC.
• Experience with identity lifecycle integrations (HR systems, SCIM provisioning) is a plus.
• Experience in automating IAM processes using PowerShell or Microsoft Graph API is a plus.

Responsabilidades

• Design, implement, and operate IAM solutions across Microsoft Entra ID and AD in a hybrid environment.
• Contribute to identity lifecycle management (Joiner-Mover-Leaver) with automated provisioning/deprovisioning.
• Implement and maintain authentication and access control mechanisms (SSO, MFA, CA).
• Design and manage RBAC/ABAC-based authorisation models with group-based access control.
• Support Privileged Identity Management and just-in-time access concepts.
• Automate IAM processes using PowerShell, Microsoft Graph API, or similar tech.
• Contribute to identity governance practices (access reviews, lifecycle policies).
• Ensure stable IAM operations and provide 2nd/3rd line support for IAM services.
• Collaborate with People & Culture, security, and IT teams to integrate IAM processes.

Conhecimentos

Identity and Access Management

Microsoft Entra ID

Active Directory

PowerShell

Microsoft Graph API

Zero Trust

RBAC

ABAC

Access governance

Just-in-time access

Ferramentas

PowerShell

Microsoft Graph API

Descrição da oferta de emprego

Zühlke is seeking an experienced Identity and Access Management Engineer to design, implement, and govern secure IAM solutions across Microsoft Entra ID and Active Directory in a hybrid setup. You’ll drive lifecycle provisioning, SSO/MFA, and RBAC/ABAC models, while automating processes with PowerShell and Graph APIs.

Collaboration with security and IT teams will be essential to maintain Zero Trust principles and strong identity governance.