Workplace Engineer - Identity & Access Management (IAM)

Planck Technologies; Lisboa; On-site; EUR 60,000 - 90,000; Full time

Job summary

Planck Technologies is seeking an experienced Identity & Access Management specialist to manage hybrid identity environments (Active Directory on-premises and Microsoft Entra ID) in Lisbon. The role focuses on authentication, authorization, RBAC, and privileged access governance within enterprise systems.

The ideal candidate will have hands-on experience with Azure AD Connect, SSO configurations, API permissions, and enterprise application management, including SailPoint or SAP Identity.

Qualifications

• Strong experience in Identity & Access Management (IAM) within enterprise environments.
• Hands-on experience managing Active Directory (On-Premises) and Microsoft Entra ID (Azure AD) in hybrid identity scenarios.
• Knowledge of Azure AD Connect including user lifecycle management, attribute synchronization, troubleshooting, and identity synchronization issues.
• Experience managing Enterprise Applications, SSO integrations, service principals, and identity federation.
• Strong understanding of Authentication, Authorization, RBAC, and privileged access management concepts.
• Experience implementing and supporting MFA, Conditional Access Policies, and secure identity controls.
• Experience with API permissions, application secrets, certificates, and service accounts.
• Privileged access concepts including Just-In-Time (JIT) access, privileged role assignment, and access reviews.
• Strong troubleshooting skills related to authentication failures, authorization issues, synchronization errors, and access provisioning challenges.
• Experience integrating identity platforms with business applications, collaboration tools, cloud services, and enterprise systems.
• Hands-on experience working with identity governance and administration platforms such as SailPoint, SAP Identity, or similar solutions.
• Ability to work autonomously in operational environments and manage identity-related incidents, changes, and improvements.
• Strong collaboration skills with Infrastructure, Security, Workplace, Cloud, and Application teams.

Responsibilities

• Manage and maintain hybrid identity environments across Active Directory and Microsoft Entra ID.
• Support user provisioning, deprovisioning, permission assignments, access reviews, and identity lifecycle management processes.
• Investigate and resolve authentication, authorization, access, and synchronization issues across enterprise platforms.
• Administer Azure AD Connect and troubleshoot synchronization, attribute mapping, and identity consistency problems.
• Configure and maintain Enterprise Applications, Single Sign-On (SSO), API permissions, secrets, and access integrations.
• Implement and support MFA, Conditional Access, RBAC models, and privileged access controls.
• Manage privileged roles, temporary access mechanisms, and access governance processes.
• Collaborate with Security and Infrastructure teams to ensure compliance with identity and security standards.
• Support integrations between identity platforms, business applications, SAP environments, and governance tools such as SailPoint.
• Contribute to continuous improvement initiatives related to identity security, automation, governance, and operational efficiency.
• Provide operational support for Microsoft 365 identity-related services including Exchange, Defender, Purview, and Intune when required.
• Participate in incident resolution, root cause analysis, and implementation of preventive measures related to identity and access management.

Skills

IAM

AD On-Premises

Azure Entra ID

Azure AD Connect

Enterprise Applications

SSO

RBAC

MFA

Just-In-Time

Access Governance

Troubleshooting

SailPoint

SAP Identity

Automation

Education

Bachelor's Degree in Computer Science/IT/Engineering or related field

Tools

SailPoint

SAP Identity

Job description

Education

Bachelor's Degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related field.

Minimum Experience

Minimum 4-5 years of experience in Identity & Access Management, Microsoft Hybrid Environments, Microsoft 365 Administration, or Enterprise Identity Operations, with proven experience supporting authentication, authorization, and access governance processes in complex corporate environments.

Main Requirements

• Strong experience in Identity & Access Management (IAM) within enterprise environments
• Hands-on experience managing Active Directory (On-Premises) and Microsoft Entra ID (Azure AD) in hybrid identity scenarios
• Solid knowledge of Azure AD Connect, including user lifecycle management, attribute synchronization, troubleshooting, and identity synchronization issues
• Experience managing Enterprise Applications, application access, SSO integrations, service principals, and identity federation
• Strong understanding of Authentication, Authorization, Role-Based Access Control (RBAC), and privileged access management concepts
• Experience implementing and supporting Multi-Factor Authentication (MFA), Conditional Access Policies, and secure identity controls
• Practical experience managing API permissions, application secrets, certificates, and service accounts
• Experience with privileged access concepts including Just-In-Time (JIT) access, privileged role assignment, and access reviews
• Strong troubleshooting skills related to authentication failures, authorization issues, synchronization errors, and access provisioning challenges
• Experience integrating identity platforms with business applications, collaboration tools, cloud services, and enterprise systems
• Hands-on experience working with identity governance and administration platforms such as SailPoint, SAP Identity, or similar solutions
• Ability to work autonomously in operational environments and manage identity-related incidents, changes, and improvements
• Strong collaboration skills with Infrastructure, Security, Workplace, Cloud, and Application teams

Nice to Have

• Experience with Microsoft Purview, Microsoft Defender, Exchange Online, and Microsoft Intune
• Knowledge of Identity Governance, Access Certifications, Joiner-Mover-Leaver processes, and Segregation of Duties (SoD)
• Experience with PowerShell automation for identity and access administration
• Knowledge of Microsoft security frameworks, Zero Trust principles, and privileged access management practices
• Experience supporting cloud transformation and hybrid identity modernization initiatives
• Certifications such as Microsoft Identity and Access Administrator, Azure Administrator, Security Administrator, or equivalent

Responsibilities

• Manage and maintain hybrid identity environments across Active Directory and Microsoft Entra ID
• Support user provisioning, deprovisioning, permission assignments, access reviews, and identity lifecycle management processes
• Investigate and resolve authentication, authorization, access, and synchronization issues across enterprise platforms
• Administer Azure AD Connect and troubleshoot synchronization, attribute mapping, and identity consistency problems
• Configure and maintain Enterprise Applications, Single Sign-On (SSO), API permissions, secrets, and access integrations
• Implement and support MFA, Conditional Access, RBAC models, and privileged access controls
• Manage privileged roles, temporary access mechanisms, and access governance processes
• Collaborate with Security and Infrastructure teams to ensure compliance with identity and security standards
• Support integrations between identity platforms, business applications, SAP environments, and governance tools such as SailPoint
• Contribute to continuous improvement initiatives related to identity security, automation, governance, and operational efficiency
• Provide operational support for Microsoft 365 identity-related services including Exchange, Defender, Purview, and Intune when required
• Participate in incident resolution, root cause analysis, and implementation of preventive measures related to identity and access management