The Azure Identity and Access Management Engineer carries out the following activities:
1. Azure IAM Design & Implementation
· Design Azure IAM solutions that align to customer security strategies, business outcomes and technical requirements.
· Build, configure and support Microsoft Entra ID environments, including users, groups, enterprise applications, app registrations, administrative roles and tenant settings.
· Implement and secure cloud and hybrid identity architectures, including Active Directory integration, Microsoft Entra Connect, synchronisation, federation and identity migration patterns.
· Configure identity lifecycle processes, including joiner, mover and leaver workflows, role-based access control, entitlement management and access reviews.
· Implement strong authentication and authorisation controls, including multi-factor authentication, Conditional Access, single sign-on, passwordless authentication and privileged identity management.
· Apply Zero Trust principles across identity, device, network, application and data access decisions.
· Produce high-quality technical documentation, including solution designs, configuration guides, deployment plans and support handover materials.
· Work closely with architects, cyber security specialists, engineers and customer stakeholders to ensure Azure IAM solutions are secure, practical and deliverable.
2. Microsoft Entra ID, Authentication & Access Control
· Build and maintain identity lifecycle processes to manage user access from onboarding through to role changes and leavers.
· Configure and support Microsoft Entra ID, Active Directory, identity stores, federation services and access management platforms.
· Implement and maintain single sign-on, multi-factor authentication, Conditional Access, passwordless authentication and modern authentication protocols.
· Support identity integration with SaaS platforms, line-of-business applications, Azure services, Microsoft 365 and enterprise infrastructure.
· Develop and support role-based access control, privileged access, access request, approval and recertification processes.
· Troubleshoot identity, authentication, authorisation, synchronisation, Conditional Access and access-related issues.
· Ensure Azure IAM solutions support auditability, compliance, least privilege and secure access to critical systems and data.
3. Zero Trust, Security Governance & Operational Support
· Configure security policies, Conditional Access controls, administrative roles, privileged access processes and identity protection capabilities.
· Implement secure-by-design patterns aligned to Zero Trust, least privilege, assume breach and defence-in-depth principles.
· Support identity governance processes, including access reviews, entitlement management, audit reporting, compliance evidence and policy enforcement.
· Establish monitoring, logging, alerting and operational support processes for Microsoft Entra ID and hybrid identity services.
· Investigate and resolve identity incidents, risky sign-ins, authentication failures, account issues and access control defects.
· Support testing, release management, migration activity and transition into live service.
· Contribute to technical assurance reviews, identifying risks, dependencies and improvement opportunities across Azure IAM environments.
· Maintain awareness of emerging identity threats, Microsoft Entra updates, cloud identity developments and IAM best practice.
4. Collaboration & Capability Development
· Work collaboratively with delivery teams, architects, cyber security specialists, business analysts and customer stakeholders to translate requirements into secure IDAM solutions.
· Support pre-sales and discovery activity by providing technical input, estimates and solution options where required.
· Contribute to reusable Methods assets, accelerators, templates and delivery standards for identity and access management.
· Share knowledge with colleagues and support the development of Methods’ wider cyber security, cloud and Microsoft capability.