IAM Specialist - Banking (Hybrid AD & Entra ID)

Devoteam | Cyber Trust; Lisboa; On-site; EUR 60,000 - 90,000; Full time

Benefits offered by this job

Professional development

Growth opportunities

Collaborative culture

Job summary

Devoteam Cyber Trust, the cybersecurity specialist arm of the Devoteam Group in Portugal, is seeking a seasoned IAM Specialist to secure our identity infrastructure in a regulated banking environment. You will maintain on-prem AD and Microsoft Entra ID across hybrid environments.

You will implement Conditional Access, MFA, PIM, automate tasks with PowerShell and Graph API, and collaborate with Cyber Security, Infrastructure and App teams to ensure compliance and robust access governance.

Qualifications

• Experience managing on-premises Active Directory and Microsoft Entra ID (Azure AD).
• Knowledge of Kerberos, SAML 2.0, OAuth2, and OpenID Connect (OIDC).
• Experience with Microsoft Entra Connect and hybrid infrastructure troubleshooting.

Responsibilities

• Administer, maintain, and support on-premises Active Directory and Microsoft Entra ID.
• Manage identity synchronization via Microsoft Entra Connect.
• Implement Conditional Access, MFA, and Privileged Identity Management.
• Oversee Joiner-Mover-Leaver lifecycle to minimize risk.
• Automate provisioning and governance with PowerShell and Graph API.
• Collaborate with Cyber Security, Infrastructure, and App teams on identity governance.
• Ensure banking regulations and audit standards compliance.
• Document IAM processes, architecture, and configurations.

Job description

Devoteam Cyber Trust, the cybersecurity specialist arm of the Devoteam Group in Portugal, is seeking a seasoned IAM Specialist to secure our identity infrastructure in a regulated banking environment. You will maintain on-prem AD and Microsoft Entra ID across hybrid environments.

You will implement Conditional Access, MFA, PIM, automate tasks with PowerShell and Graph API, and collaborate with Cyber Security, Infrastructure and App teams to ensure compliance and robust access governance.