Key skills
PowerShellIAMEntra IDOktaSAMLActive DirectorySSO
About this role
Role Overview
- Co-own and advance authentication capabilities end-to-end
- Manage Entra ID configurations for SSO, MFA, and Conditional Access baselines
- Oversee app registrations, enterprise app approvals, and environment hygiene
- Govern admin consent for Graph/API scopes
- Support a multi-domain Active Directory environment and ensure optimised global authentication
- Maintain overall GPO health and configuration management
- Lead transitions between On-Prem AD and Entra ID
- Enhance authentication using FIDO2 and phish-resistant methods
- Monitor authentication service health and publish regular performance and risk reports
- Implement OIDC/SAML federation patterns and SCIM integrations
- Advance Customer IAM journeys and strengthen posture integrations with ClearPass
- Drive identity transition projects and collaborate closely with the broader Global IAM team
Requirements
- Relevant IAM experience
- Strong expertise in Active Directory and Entra ID
- Hands-on experience managing and supporting OKTA, ClearPass, and NPS (asset)
- Direct experience with AD → Entra ID transitions
- Proficiency in automation/scripting, including PowerShell and Power Automate
- Proven ownership of GPO design, health, and lifecycle management
- Deep understanding of modern authentication technologies and industry standards
- Microsoft SC-300 or equivalent IAM/security certification
Benefits
- Competitive salary
- bonus
- 25 days holiday
- life insurance
- up to 7% pension
- Comprehensive benefits package
- A supportive and collaborative work environment
- Opportunities for professional growth and development