IAM Specialist - Banking (Hybrid AD/Entra, Zero Trust)

Devoteam; Lisboa; Hybrid; EUR 60,000 - 100,000; Full time

Benefits offered by this job

Professional development

Growth culture

Equal opportunities

Job summary

Devoteam seeks an experienced IAM Specialist to secure identity infrastructure within a regulated banking environment. You will manage on-premises AD and Microsoft Entra ID, ensure secure access, and drive hybrid authentication strategy.

Responsibilities include enforcing Conditional Access, MFA, and PIM, and automating tasks via PowerShell and Graph API, while collaborating with Cyber Security, Infra, and App teams to maintain governance and compliance.

Qualifications

• On-premises AD and Entra ID management expertise.
• Knowledge of modern and legacy authentication protocols.
• Experience with Microsoft 365 ecosystem and Graph API.
• Understand Zero Trust concepts in banking environments.
• Hybrid infrastructure experience with Entra Connect.

Responsibilities

• Administer on-premises AD and Microsoft Entra ID to ensure secure access control.
• Manage identity synchronization via Microsoft Entra Connect.
• Enforce Conditional Access, MFA, and PIM for sensitive assets.
• Oversee Joiner-Mover-Leaver lifecycle to minimize risks.
• Automate tasks using PowerShell and Graph API.
• Collaborate with Cyber Security, Infrastructure and Applications teams.
• Ensure compliance with banking regulations and audit standards.
• Document IAM processes, architectures, and configurations.

Skills

Active Directory

Microsoft Entra ID

PowerShell

MFA

Conditional Access

PIM

Identity Governance

Zero Trust

OAuth2

SAML 2.0

OIDC

Azure AD Connect

Microsoft Graph API

Tools

Azure AD Connect

Job description

Devoteam seeks an experienced IAM Specialist to secure identity infrastructure within a regulated banking environment. You will manage on-premises AD and Microsoft Entra ID, ensure secure access, and drive hybrid authentication strategy.

Responsibilities include enforcing Conditional Access, MFA, and PIM, and automating tasks via PowerShell and Graph API, while collaborating with Cyber Security, Infra, and App teams to maintain governance and compliance.