About this role
Salary: £? - ? per year
Requirements: Strong hands-on experience engineering MFA and SSO within enterprise IAM environmentsDeep understanding of modern authentication and federation protocols, particularly OIDC/OAuth2 and SAMLExperience with at least one enterprise Identity Provider platformStrong understanding of authentication vs authorisation, identity lifecycle, and trust boundariesWorking knowledge of PKI, certificates, TLS, and key managementExperience operating production IAM services, including monitoring, incident, and change managementStrong communication and stakeholder management skills, with the confidence to challenge and influence technical decisionsAbility to work across architecture, cybersecurity, infrastructure, and application teamsEntra ID / Azure AD experienceFIDO2/WebAuthn and phishing-resistant MFA experiencePowerShell and/or Python scripting and API experienceZero Trust and adaptive/risk-based authentication knowledgePAM and privileged authentication experienceCloud and hybrid identity experience across Azure, AWS, or GCPExperience in financial services or other regulated environmentsRelevant IAM, security, or Microsoft Identity certifications Responsibilities: Help deliver modern authentication capabilities across a complex enterprise environmentWork hands-on across MFA, IAM, and authentication technologiesPartner with architecture, cybersecurity, application, and infrastructure teamsSupport a strategic Identity and Access Management transformation programmeHelp shape and deliver the future of authentication across a complex financial services environment Technologies: APIAWSAzureCloudGCPIAMSupportPowerShellPythonSAMLSecurityDevOps More:
We are partnering with a leading financial services client on a strategic Identity and Access Management transformation programme. This is a remote-based contract opportunity, inside IR35, with the potential requirement to work from Sheffield two days per week if a new office policy is introduced. We are looking for an experienced MFA Engineer to join a hands-on engineering role and help shape and deliver modern authentication capabilities across a complex enterprise environment.
last updated 37 week of 2026