At a Glance
- Tasks: Lead the evolution of identity platforms and modernise directory services in a cloud-native environment.
- Company: Join a leading retail organisation focused on security and innovation.
- Benefits: Competitive salary, flexible working, and opportunities for professional growth.
- Why this job: Make a real impact by transforming identity management and enhancing security protocols.
- Qualifications: 5-10 years in IAM with expertise in Azure Entra ID and hybrid cloud transitions.
- Other info: Diverse and inclusive workplace that values every individual's unique background.
The predicted salary is between 36000 - 60000 £ per year.
The following information provides an overview of the skills, qualities, and qualifications needed for this role.
Permanent London 2x a week
About the Role
We are exclusively partnered with a leading retail organisation who are seeking a highly skilled and security-focused Senior IAM Engineer to spearhead the evolution of our identity platforms and core infrastructure. As we transition toward a cloud-native, Entra ID-centric ecosystem, you will take full ownership of modernising our directory services and enterprise baseline. This is a pivotal role for a technical leader who excels in managing hybrid environments while strategically driving the retirement of legacy Active Directory (AD DS) in favor of Microsoft Entra ID and Intune. You will act as the technical authority for identity, ensuring all infrastructure controls are robust, compliant, and strictly aligned with Zero Trust principles.
Key Responsibilities
- Identity & Access Management (IAM): Design and manage hybrid identity configurations, including domain joins, OU/GPO design, and trust relationships.
- Security Implementation: Maintain SSO, Conditional Access, MFA, and passwordless authentication strategies.
- Privileged Access: Define and oversee RBAC, PIM, and Just-in-Time (JIT) access for administrative and service accounts.
- Cloud Migration: Lead the shift from domain-joined/hybrid environments to Entra ID joined, utilizing Windows Autopilot and Intune for lifecycle management.
- Infrastructure Modernization: Replace legacy GPO-based configurations with Intune configuration profiles and security baselines.
- Legacy Decommissioning: Plan the phase-out of traditional services such as ADCS, on-prem LDAP applications, and outdated protocols like Kerberos and NTLM.
- Automation: Streamline operations by automating identity tasks using PowerShell, Microsoft Graph API, and Azure CLI.
- Governance & Compliance: Ensure all platforms meet hardening standards and assist with audit readiness for frameworks such as ISO 27001, GDPR, or PCI DSS.
What We’re Looking For
Essential Experience:
- Expertise in Microsoft Identity: Proven track record with Azure Entra ID, Active Directory, and managing hybrid-to-cloud transitions.
- Device Management: Strong proficiency in Microsoft Intune/Endpoint Manager and modern Windows device transformation.
- Security Tooling: Hands-on experience deploying PIM, SSPR, and Conditional Access in a production environment.
- Protocols: Deep understanding of authentication protocols (SAML, OIDC, OAuth2, LDAP) and their cloud-based alternatives.
- Governance: Experience with Entra ID Governance features, including Access Reviews and Lifecycle Workflows.
- Automation Skills: Proficient in scripting with PowerShell or Logic Apps to ensure scalable operations.
Desirable Experience:
- Familiarity with Microsoft Purview, Defender for Identity, or Microsoft Sentinel.
- Background in retiring legacy infrastructure like RADIUS or on-prem file shares.
- Knowledge of Zero Trust architecture and CIS/NIST compliance baselines.
Qualifications & Attributes
- Experience: 5–10 years within IAM, Windows Infrastructure, or Hybrid Cloud Operations.
- Education: Bachelor’s degree in Computer Science, Cyber Security, or equivalent professional experience.
- Certifications (Preferred): Microsoft SC-300, SC-100, MD-102, or AZ-104.
- Soft Skills: An analytical mindset with the ability to lead transformational projects and collaborate effectively across Security and DevOps teams.
Eligo Recruitment is acting as an Employment Business in relation to this vacancy. Eligo is proud to be an equal opportunity employer dedicated to fostering diversity and creating an inclusive and equitable environment for employees and applicants. We actively celebrate and embrace differences, including but not limited to race, colour, religion, sex, sexual orientation, gender identity, national origin, veteran status, and disability. We encourage applications from individuals of all backgrounds and experiences and all will be considered for employment without discrimination. At Eligo Recruitment diversity, equity and inclusion is integral to achieving our mission to ensure every workplace reflects the richness of human diversity.
IAM Engineer in London employer: Eligo Recruitment Ltd
Contact Detail:
Eligo Recruitment Ltd Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land IAM Engineer in London
✨Tip Number 1
Network like a pro! Reach out to your connections in the IAM field and let them know you're on the hunt for a new role. Attend industry meetups or webinars to meet potential employers and get your name out there.
✨Tip Number 2
Show off your skills! Create a personal project or contribute to open-source initiatives that showcase your expertise in Microsoft Entra ID and automation. This not only builds your portfolio but also gives you something tangible to discuss in interviews.
✨Tip Number 3
Prepare for those tricky interview questions! Brush up on your knowledge of authentication protocols and governance features. We recommend practising with a friend or using mock interview platforms to boost your confidence.
✨Tip Number 4
Apply through our website! We’ve got loads of opportunities waiting for you, and applying directly can sometimes give you an edge. Plus, it’s super easy to keep track of your applications this way!
We think you need these skills to ace IAM Engineer in London
Some tips for your application 🫡
Tailor Your CV: Make sure your CV is tailored to the IAM Engineer role. Highlight your experience with Microsoft Entra ID, Azure, and any relevant projects you've led. We want to see how your skills align with our needs!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about identity management and how you can contribute to our team. Keep it concise but impactful – we love a good story!
Showcase Your Technical Skills: Don’t hold back on showcasing your technical expertise! Mention specific tools and technologies you’ve worked with, like PowerShell or Intune. We’re looking for someone who can hit the ground running, so let us know what you bring to the table.
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you don’t miss out on any updates. Plus, it shows you’re keen to join our team at StudySmarter!
How to prepare for a job interview at Eligo Recruitment Ltd
✨Know Your IAM Stuff
Make sure you brush up on your knowledge of Microsoft Entra ID, Active Directory, and hybrid cloud transitions. Be ready to discuss your hands-on experience with SSO, MFA, and Conditional Access, as these are crucial for the role.
✨Showcase Your Automation Skills
Prepare to talk about how you've used PowerShell or Azure CLI to automate identity tasks. Bring examples of scripts you've written or processes you've streamlined, as this will demonstrate your ability to enhance operational efficiency.
✨Understand Zero Trust Principles
Familiarise yourself with Zero Trust architecture and how it applies to IAM. Be prepared to explain how you've implemented security controls that align with these principles in past roles, as this is a key focus for the company.
✨Be Ready for Scenario Questions
Expect scenario-based questions that test your problem-solving skills in real-world situations. Think about challenges you've faced in managing hybrid environments and how you approached them, as this will show your strategic thinking and leadership capabilities.