Microsoft Entra ID Architect

Microsoft Entra ID Architect

12‑month contract (initially).Based: Hybrid – maximum of 2–3 days per week onsite in London.Rate: £500–£600 per day via Umbrella.

Key Responsibilities

Entra ID Security Configuration

• Implement and manage Conditional Access policies using:
  • User / Sign‑in Risk
  • Device compliance
  • Location and workload identity conditions
• Configure:
  • MFA and Passwordless (FIDO2, Authenticator, TAP)
  • Authentication Methods policy
  • Identity Protection risk policies
• Implement and operationalise Privileged Identity Management (PIM):
  • Role assignments
  • Activation policies
  • Approval workflows

Entra Identity Governance Implementation

• Deploy and configure:
  • Lifecycle Workflows (Joiner, Mover, Leaver)
  • Entitlement Management (Access Packages, catalogues)
  • Access Reviews (apps, groups, privileged roles)
• Map business roles to governance controls and access models.

Provisioning & Automation

• Implement user and group provisioning using:
  • Entra ID Provisioning Service
  • SCIM connectors
  • Microsoft Graph API
• Build workflows using Logic Apps / Power Automate for approvals, notifications, and exception handling.

Application & External Access

• Onboard applications using SAML, OAuth2, OpenID Connect.
• Configure B2B Collaboration, Cross‑Tenant Access, and External Identity controls.

DevOps & Automation

• Execute Identity as Code using PowerShell and Graph API.
• Deploy Entra changes using CI/CD pipelines.
• Support customer go‑lives, changes, and identity‑related incidents.

Key Skills & Experience

• Ideally 7–10+ years of hands‑on experience with Microsoft Entra ID.
• Strong implementation experience with:
  • Conditional Access
  • Identity Protection
  • PIM
  • Lifecycle Workflows
  • Entra Provisioning / SCIM

Desirable Skills & Knowledge / Experience

• Strong PowerShell and Graph API skills.
• Customer‑facing delivery experience.

Equal Opportunity Statement

We welcome applications from all individuals, regardless of background or identity, and we encourage candidates who may not meet every listed requirement to still apply. If you require any adjustments or support during the recruitment process, please let us know and we will work with you to ensure a fair and accessible experience.

#J-18808-Ljbffr…