Identity Management Consultant

Day Rate: Up to £765 per day (via umbrella) potential for flex DOE

Start: ASAP

Summary

An established national organisation is seeking a hands‑on IAM Engineer to implement and operate identity, authentication, and access controls across Microsoft 365 and Microsoft Entra ID (Azure AD).

Focus is on SSO, MFA, Conditional Access, identity lifecycle, and privileged access (with CyberArk as a desirable skill). This is a delivery and operations role (not an architect), partnering with Security, Infrastructure, and Service Management to harden controls, reduce risk, and improve user experience.

Responsibilities

• Entra ID operations & hardening: tenant hygiene, identity security baseline, Conditional Access (CA) design/maintenance, break‑glass access.
• SSO engineering: onboard and support SAML/OIDC apps; configure enterprise app registrations, claims, tokens, and session settings.
• MFA at scale: method policies (Authenticator, FIDO2, SMS), registration campaigns, CA‑based MFA enforcement, resilient admin access patterns.
• Microsoft 365 alignment: integrate with Defender for Cloud Apps, govern Exchange/SharePoint/Teams access, improve Secure Score.

Required Skills & Experience

• Proven, hands‑on Microsoft Entra ID administration: app registrations, Conditional Access, Identity Protection, authentication strengths, and policy operations.
• MFA engineering and rollout: CA‑based MFA, method policies, break‑glass procedures, staged/targeted deployments.
• Microsoft 365 security controls: Exchange, SharePoint/OneDrive, Teams governance and access configuration.
• CyberArk PAM (Core PAS): Safes, platform onboarding, credential rotation, PSM/PSMP, API integration.

If you have the relevant skills and interested in hearing more please apply with your latest CV.

#J-18808-Ljbffr…