DIGITAL SECURITY - IAM - Azure AD

Capability, Knowledge and Experience

Must have excellent and demonstrable working knowledge of modern Identity & Access Management systems in a hybrid model, acting as a technical expert in the following areas:

Active Directory & Microsoft Entra ID (formerly Azure Active Directory) / Microsoft Entra Connect (formerly AD Connect) / Microsoft Entra Seamless Single Sign-On (Seamless SSO)

Active Directory Federated Services (ADFS)

Conditional Access

Multi-Factor Authentication (MFA) / Self-Service Password Reset (SSPR)

Role-Based Access Control (RBAC) / Microsoft Entra Privileged Identity Management (PIM)

Enterprise Application (SSO) & Application Registration

Strong working knowledge of current security standards, protocols, and features including but not limited to SAML, OAuth, LDAP, Kerberos, SSO, and FIDO2.

Strong experience in using cloud-based identity models, including external identities (B2B & B2C).

Hands-on ability to troubleshoot and resolve complex issues across IAM technologies.

Highly advantageous (but not essential) technical experience includes

Microsoft Identity Manager (MIM)

Microsoft Entra ID User Provisioning (Joiners / Movers / Leavers)

Microsoft Entra ID Governance (Identity Protection, Access Reviews, Entitlement Management)

PKI Certificate Management

Excellent communication skills, both verbal and written, with colleagues, clients, and customers at all levels; a strong communicator who develops relationships for mutual gain.

Highly motivated and solution focused.

Experience applying ITIL best practices to key processes, including incident, change, and problem management.

Takes personal ownership and pride in the quality of solutions delivered.

Proactive in keeping skills up to date and maintaining awareness of developments in the IT industry.

Good knowledge of analytical techniques, methods, and problem-solving skills.

Comfortable working with senior staff, both business and IT.

Experience working with outsource partners and delivering solutions into support.

Excellent documentation skills.

An undergraduate degree in Computing, Information Technology, or a related technical discipline is highly desirable, or equivalent professional accreditation.

One or more of the following certifications is preferred:

Microsoft Identity and Access Administrator

Microsoft 365 Certified

Enterprise Administrator Expert

Microsoft Certified

Azure Security Engineer Associate (or equivalent security-focused certification)

Additional relevant Microsoft Entra or security certifications will be considered an advantage.

Personal Characteristics