Identity & Access Management Engineer

Identity & Access Management Engineer - IAM, PAM, MFA, Azure, Entra, Active Directory, RBAC, PIM, Intune

Our global law firm client are actively looking to take on a new Identity & Access Management Engineer (IAM, PAM, MFA, Azure, Entra, Active Directory, RBAC, PIM, Intune) to join their team on a permanent basis. This role will specialise in the design and implementation of IAM related technologies within the firms infrastructure as well as potential new products and/or features.

This is a great opportunity to join a highly prosperous global law firm and work on class-leading projects in a very high achieving environment. They adopt a diverse culture with a great deal of convenient services including breakfasts and lunches as well as an extensive amount of social events.

This Identity & Access Management Engineer (IAM, PAM, MFA, Azure, Entra, Active Directory, RBAC, PIM, Intune) will perform and require the following:

Duties:

• Will assist in the administration, maintenance, and day-to-day operation of firms IAM, directory, e-mail, and telephony systems as they relate to user identity.
• Coordinates with Human Resources for on/off boarding of all personnel.
• Works in cooperation with the Firm-Wide Service Desk and Technology Support staff members in the troubleshooting, diagnosis, and resolution of incidents.
• Occasionally provides technical support to end users. Must have excellent troubleshooting and customer service skills.
• Appropriately inform and advise management on incidents and incident prevention.
• Participate in knowledge sharing with other engineers and develop solutions efficiently.

Technology/Software expertise:

• Proven experience in Active Directory management and security.
• Experience with Microsoft Azure/Entra, roles, RBAC and PIM.
• Experience with M365, Intune and related technologies.
• Experience with Privileged Access Management (PAM) technologies such as Delinea (preferred), CyberArk, etc.
• Experience with Identity Governance Tools. Veza preferred.
• Experienced level of understanding of Identity & Access Management, Single Sign-On, Multi-Factor Authentication (MFA), and Authentication, Identity Governance & Administration concepts.
• Experience with using PowerShell scripting and the ability to read code.
• Experience with Outlook/Exchange and an understanding of mail routing.
• Experience with Windows file/folder security and understanding of DFS.
• Basic knowledge of DNS, DHCP, IP Addressing, network technologies and routing.
• Microsoft Outlook, Word, & Excel required.