IAM Engineer/Analyst - London - (1-2 days a week) in Tower

I am currently working with an organisation who are building out/maturing their IT security posture from group level. The client has completed a 3-5yr strategy and identified a need for an IAM analyst/engineer to work closely with the infrastructure team and own IAM/PAM/PIM, initially working on centralising policies/procedures, user access, permissions and then moving on to other areas of the strategy such as IAM/PAM tools and zero trust. This would be a fantastic opportunity for someone with broad knowledge across IAM at analyst/engineer level to develop further by having focus and opportunity to learn more within this role, working directly with the CISO, GRC consultant and Infrastructure/cloud team.     Main duties/responsibilities Help support the group’s identity, access and MS security controls. Hands on support to move away from legacy Active Directory dependencies, strengthen Entra ID and privileged access controls, adopt Zero Trust principles and better leverage Microsoft E5 capabilities and automation opportunities. Hands-on engineering for Microsoft Entra ID, hybrid identity, Conditional Access, MFA, Privileged Identity Management, User Access Reviews and other identity governance controls. Apply in-depth specialised knowledge to solve moderately complex identity and access control issues across infrastructure, endpoint and cloud services, for all Human, and Non-human Identities Ensure identity and access processes, systems and controls remain compliant with approved standards, risk treatments and audit requirements. Work with Infrastructure, Group Information Security and service partners to improve endpoint and identity controls, operational processes and end user experience.  Key skills/background/experience Advanced practical knowledge of Microsoft Entra ID, Microsoft 365, Azure, Microsoft Intune, Azure Virtual Desktop and Windows 365 Cloud PC, including how these services support secure endpoint, cloud desktop and identity operations. Strong hands-on experience implementing Conditional Access, MFA, Single Sign-On, SAML, federated identity, Privileged Identity Management, user access reviews, entitlement management, RBAC and privileged access management controls. Experience supporting employee and customer identity solutions, including lifecycle management, authentication patterns, identity federation, external identity integration and secure access for workforce, partner and customer facing services. Experience with certificate management and public key infrastructure concepts  Side notes Hybrid, ideally 2 days a week central London, maybe reduced to 1 day. Discretionary bonus attached to this role Salary range is between £50,000-£80,000 (Depending on experience/seniority/relevance to role)