Identity and Access Management Engineer, Methods

• Proven experience designing, implementing, configuring or supporting Azure Identity and Access Management solutions
• Strong understanding of Microsoft Entra ID, Active Directory, cloud and hybrid identity, authentication, authorisation, federation, access governance and privileged access management
• Experience with Microsoft Entra ID capabilities, including Conditional Access, MFA, single sign-on, app registrations, enterprise applications, identity protection, entitlement management and privileged identity management
• Knowledge of authentication protocols and identity standards such as SAML, OAuth, OpenID Connect, LDAP and Kerberos
• Experience integrating identity services with Azure, Microsoft 365, SaaS applications, enterprise applications and on-premises infrastructure
• Understanding of Zero Trust, least privilege, identity governance, audit, compliance and cyber security best practice
• Ability to troubleshoot identity, access, authentication, synchronisation, Conditional Access and permission-related issues
• Experience working in Agile delivery teams and producing clear technical documentation
• Strong stakeholder management and communication skills, with the ability to explain technical concepts to technical and non-technical audiences
• Self-motivated, collaborative and able to work across multiple client environments and delivery priorities

Desirable

• As part of our continued growth, we are seeking experienced and technically capable Azure Identity and Access Management Engineers to build, secure and manage user identities, access controls and authentication protocols across cloud and hybrid environments
• This role centres on Microsoft Entra ID, formerly Azure Active Directory, and supports the protection of enterprise systems through Zero Trust security models, strong authentication, least privilege access and effective identity governance
• 1. Azure IAM Design & Implementation
• Design Azure IAM solutions that align to customer security strategies, business outcomes and technical requirements
• Build, configure and support Microsoft Entra ID environments, including users, groups, enterprise applications, app registrations, administrative roles and tenant settings
• Implement and secure cloud and hybrid identity architectures, including Active Directory integration, Microsoft Entra Connect, synchronisation, federation and identity migration patterns
• Configure identity lifecycle processes, including joiner, mover and leaver workflows, role-based access control, entitlement management and access reviews
• Implement strong authentication and authorisation controls, including multi-factor authentication, Conditional Access, single sign-on, passwordless authentication and privileged identity management
• Apply Zero Trust principles across identity, device, network, application and data access decisions
• Produce high-quality technical documentation, including solution designs, configuration guides, deployment plans and support handover materials
• Work closely with architects, cyber security specialists, engineers and customer stakeholders to ensure Azure IAM solutions are secure, practical and deliverable. 2. Microsoft Entra ID, Authentication & Access Control
• Build and maintain identity lifecycle processes to manage user access from onboarding through to role changes and leavers
• Configure and support Microsoft Entra ID, Active Directory, identity stores, federation services and access management platforms
• Implement and maintain single sign-on, multi-factor authentication, Conditional Access, passwordless authentication and modern authentication protocols
• Support identity integration with SaaS platforms, line-of-business applications, Azure services, Microsoft 365 and enterprise infrastructure
• Develop and support role-based access control, privileged access, access request, approval and recertification processes
• Troubleshoot identity, authentication, authorisation, synchronisation, Conditional Access and access-related issues
• Ensure Azure IAM solutions support auditability, compliance, least privilege and secure access to critical systems and data. 3. Zero Trust, Security Governance & Operational Support
• Configure security policies, Conditional Access controls, administrative roles, privileged access processes and identity protection capabilities
• Implement secure-by-design patterns aligned to Zero Trust, least privilege, assume breach and defence-in-depth principles
• Support identity governance processes, including access reviews, entitlement management, audit reporting, compliance evidence and policy enforcement
• Establish monitoring, logging, alerting and operational support processes for Microsoft Entra ID and hybrid identity services
• Investigate and resolve identity incidents, risky sign-ins, authentication failures, account issues and access control defects
• Support testing, release management, migration activity and transition into live service
• Contribute to technical assurance reviews, identifying risks, dependencies and improvement opportunities across Azure IAM environments
• Maintain awareness of emerging identity threats, Microsoft Entra updates, cloud identity developments and IAM best practice. 4. Collaboration & Capability Development
• Work collaboratively with delivery teams, architects, cyber security specialists, business analysts and customer stakeholders to translate requirements into secure IDAM solutions
• Support pre-sales and discovery activity by providing technical input, estimates and solution options where required
• Contribute to reusable Methods assets, accelerators, templates and delivery standards for identity and access management
• Share knowledge with colleagues and support the development of Methods' wider cyber security, cloud and Microsoft capability