It Iam Engineer

Zühlke; Porto; Híbrido; EUR 60 000 - 90 000; Tempo integral

Resumo da oferta

Zühlke is seeking an experienced Identity and Access Management Engineer to design, implement, and govern secure IAM solutions across Microsoft Entra ID and Active Directory in a hybrid setup. You’ll drive lifecycle provisioning, SSO/MFA, and RBAC/ABAC models, while automating processes with PowerShell and Graph APIs.

Collaboration with security and IT teams will be essential to maintain Zero Trust principles and strong identity governance.

Qualificações

• Experience in Identity and Access Management or related field.
• Hands-on with Microsoft Entra ID and Active Directory in hybrid environments.
• Knowledge of authentication technologies and standards such as SSO, MFA, and OpenID Connect.
• Familiar with access control models and governance principles including RBAC/ABAC.
• Experience with identity lifecycle integrations (HR systems, SCIM provisioning) is a plus.
• Experience in automating IAM processes using PowerShell or Microsoft Graph API is a plus.

Responsabilidades

• Design, implement, and operate IAM solutions across Microsoft Entra ID and AD in a hybrid environment.
• Contribute to identity lifecycle management (Joiner-Mover-Leaver) with automated provisioning/deprovisioning.
• Implement and maintain authentication and access control mechanisms (SSO, MFA, CA).
• Design and manage RBAC/ABAC-based authorisation models with group-based access control.
• Support Privileged Identity Management and just-in-time access concepts.
• Automate IAM processes using PowerShell, Microsoft Graph API, or similar tech.
• Contribute to identity governance practices (access reviews, lifecycle policies).
• Ensure stable IAM operations and provide 2nd/3rd line support for IAM services.
• Collaborate with People & Culture, security, and IT teams to integrate IAM processes.

Conhecimentos

Identity and Access Management

Microsoft Entra ID

Active Directory

PowerShell

Microsoft Graph API

Zero Trust

RBAC

ABAC

Access governance

Just-in-time access

Ferramentas

PowerShell

Microsoft Graph API

Descrição da oferta de emprego

Founded in Switzerland in 1968, Zühlke is owned by its partners and located across Europe and Asia. We are a global transformation partner, with engineering and innovation in our DNA. We’re trusted to help clients envision and build their businesses for the future – to run smarter today while adapting for tomorrow’s markets, customers, and communities. Our multidisciplinary teams specialise in tech strategy and business innovation, digital solutions and applications, and device and systems engineering. We excel in complex, regulated spaces including health and finance, connecting strategy, tech implementation, and operational services to help clients become more effective, resilient businesses.

If you share our values and want to do the best work, for the right reasons, we can offer you the chance to do it on a global scale and play a real role in shaping our exciting journey.

The role

We are looking for an experienced Identity and Access Management (IAM) Engineer with a strong focus on Microsoft identity technologies to contribute to the design, implementation, and continuous improvement of our identity landscape.

In this role, you will build and operate secure, scalable, and well-governed identity and access solutions across cloud and on-premises environments. You will act as a technical expert and trusted advisor for internal stakeholders, enabling secure collaboration, enforcing access governance, and ensuring that identity remains a strong foundation of trust across the organisation.

You actively contribute to the evolution, automation, and governance of IAM capabilities, ensuring alignment with security principles, business requirements, and compliance standards.

How you’ll make an impact

• You design, implement, and operate identity and access management solutions across Microsoft Entra ID and Active Directory in a hybrid environment.
• You contribute to identity lifecycle management (Joiner-Mover-Leaver), ensuring accurate, automated, and auditable provisioning and deprovisioning processes.
• You implement and maintain authentication and access control mechanisms such as Single Sign-On, Multi-Factor Authentication, Conditional Access, and workload identity authentication.
• You design and manage authorisation models based on role-based and attribute-driven principles (RBAC/ABAC), leveraging group-based access control to ensure least privilege and effective access governance.
• You support Privileged Identity Management (PIM) and just-in-time access concepts to reduce standing privileges and strengthen security.
• You contribute to the automation of IAM processes using PowerShell, Microsoft Graph API, or similar technologies, improving efficiency, consistency, and scalability.
• You contribute to identity governance practices such as access reviews, lifecycle policies, and compliance controls.
• You ensure stable IAM operations and provide 2nd and 3rd level support for identity-related services and integrations.
• You collaborate with People & Culture, security, and internal IT teams to integrate and continuously improve identity processes within the broader IT landscape.
• You contribute to the continuous improvement of IAM architecture, standards, and processes, aligning with principles such as Zero Trust and identity-centric security.

What’s important to us

• You have several years of experience in Identity and Access Management or a closely related field.
• You have hands-on experience with Microsoft identity technologies, especially Microsoft Entra ID and Active Directory in hybrid environments.
• You understand core IAM concepts such as identity lifecycle management (Joiner-Mover-Leaver), authentication, access control, and authorisation.
• You are familiar with authentication technologies and standards such as Single Sign-On, Multi-Factor Authentication, and modern identity protocols (e.g. SAML, OAuth2, OpenID Connect).
• You have a solid understanding of access control models and governance principles, including least privilege, role-based access, and access reviews.
• Experience with identity lifecycle integrations (e.g. HR systems, SCIM provisioning, or directory synchronisation) is a plus.
• Experience in automating IAM processes using PowerShell, Microsoft Graph API, or similar technologies is considered a plus.
• You understand security and compliance principles in the context of identity (e.g. Zero Trust, auditability, data protection).
• You work in a structured, reliable, and solution-oriented way, with a strong sense of accountability for your work.
• You are team-oriented and value collaboration, knowledge sharing, and joint problem-solving
• You bring analytical thinking and can clearly explain complex technical topics to different stakeholders.
• You communicate openly and effectively with stakeholders and team members, aligning on solutions and delivering results together.

If you feel you don’t meet all the requirements, we are still happy to get to know you, learn more about your ambitions and ideas and look forward to receiving your application!

We welcome people from all backgrounds, regardless of their gender, personality, national origin, race, religion, colour, sexual orientation, gender identity, age, marital status, disability or veteran status.

We are a global transformation partner with an engineering and innovation DNA, blending strategy, tech and operations for resilient, effective businesses.