About this role
Salary: £50,000 - 80,000 per year
Requirements
- Advanced practical knowledge of Microsoft Entra ID, Microsoft 365, Azure, Microsoft Intune, Azure Virtual Desktop and Windows 365 Cloud PC, including their role in secure endpoint, cloud desktop and identity operations.
- Strong hands-on experience implementing Conditional Access, MFA, Single Sign-On, SAML, federated identity, Privileged Identity Management, user access reviews, entitlement management, RBAC and privileged access management controls.
- Experience supporting employee and customer identity solutions, including lifecycle management, authentication patterns, identity federation, external identity integration and secure access for workforce, partner and customer-facing services.
- Experience with certificate management and public key infrastructure concepts.
Responsibilities
- Help support our groups identity, access and Microsoft security controls.
- Provide hands-on support to reduce legacy Active Directory dependencies, strengthen Entra ID and privileged access controls, adopt Zero Trust principles, and make better use of Microsoft E5 capabilities and automation opportunities.
- Engineer Microsoft Entra ID, hybrid identity, Conditional Access, MFA, Privileged Identity Management, user access reviews and other identity governance controls.
- Apply specialised knowledge to solve moderately complex identity and access control issues across infrastructure, endpoint and cloud services for human and non-human identities.
- Ensure identity and access processes, systems and controls remain compliant with approved standards, risk treatments and audit requirements.
- Work with our Infrastructure, Group Information Security and service partners to improve endpoint and identity controls, operational processes and the end-user experience.
Technologies
- Active Directory
- Azure
- Cloud
- IAM
- Support
- Microsoft 365
- Microsoft Intune
- RBAC
- SAML
- Security
- Windows
- Office 365
- DevOps
More
We are building and maturing our IT security posture at group level, guided by a completed three-to-five-year strategy. We are seeking an IAM analyst or engineer to work closely with our infrastructure team and take ownership of IAM, PAM and PIM. The role will initially focus on centralising policies and procedures, user access and permissions, then progress to other strategy areas such as IAM/PAM tools and Zero Trust. You will work directly with our CISO, GRC consultant and infrastructure/cloud team, with opportunities to develop your broad IAM knowledge. The role is hybrid, ideally with two days a week in central London, potentially reduced to one day. It includes a discretionary bonus, and the salary range is £50,000–£80,000 depending on experience, seniority and relevance to the role.
last updated 43 week of 2026