IAM Engineer - Banking Sector

Job Description

We are seeking a seasoned Identity & Access Management (IAM) Specialist to oversee and secure our identity infrastructure within a highly regulated banking environment. In this role, you will play a key part in maintaining the security, continuity, and compliance of our critical authentication and authorization systems across hybrid environments integrating on-premises Active Directory (AD) and Microsoft Entra ID (formerly Azure AD).

Key Responsibilities

• Identity Management & Operations: Administer, maintain, and support on-premises Active Directory and Microsoft Entra ID to ensure seamless, secure access control.

• Hybrid Synchronization: Manage identity synchronization and lifecycle integration via Microsoft Entra Connect (Azure AD Connect).

• Access Control & Zero Trust Security: Implement and enforce Conditional Access policies, Multi-Factor Authentication (MFA), and Privileged Identity Management (PIM) to safeguard sensitive banking assets.

• Lifecycle Management: Oversee and optimize the full Joiner-Mover-Leaver (JML) identity lifecycle to minimize security risks and ensure operational effectiveness.

• Automation: Automate routine administrative tasks, identity provisioning, and governance routines using PowerShell and the Microsoft Graph API.

• Cross-Functional Collaboration: Partner with Cyber Security, Infrastructure, and Application teams to define, align, and refine identity governance and access control policies.

• Regulatory Compliance & Audit: Ensure strict adherence to banking regulations, security frameworks, and internal/external audit standards.

• Documentation: Create and maintain comprehensive documentation covering IAM processes, operational procedures, architecture, and configurations.

Qualifications

• Core Identity: Proven hands-on experience managing on-premises Active Directory and Microsoft Entra ID (Azure AD).

• Authentication Protocols: Strong knowledge of modern and legacy authentication protocols, including Kerberos, SAML 2.0, OAuth2, and OpenID Connect (OIDC).

• Hybrid Infrastructure: Solid background in configuring, maintaining, and troubleshooting Microsoft Entra Connect.

• Automation & Scripting: High proficiency in PowerShell scripting and familiarity with Microsoft Graph API for task automation.

• Security Controls: Practical expertise with Conditional Access, MFA, PIM, and Identity Governance.

• Ecosystem Integration: Working knowledge of the broader Microsoft 365 ecosystem, Microsoft Intune, and identity integration patterns.

• Security Frameworks: Strong understanding of security principles, particularly Zero Trust Architecture and Least Privilege Access in financial institutions.

Value-Add Qualifications & Soft Skills

• Certifications: Microsoft Certified: Identity and Access Administrator Associate (SC-300), Azure Administrator Associate (AZ-104), or Security Fundamentals (SC-900).

• Banking / Enterprise Scale: Prior experience working in medium-to-large hybrid environments within banking or financial services.

• Analytical Mindset: Strong problem-solving skills, methodical troubleshooting approach, and high attention to detail.

• Soft Skills: Excellent communication skills, stakeholder management capabilities, and a collaborative team spirit.

Additional Information

What we offer:

• Professional development and monitoring talent;
• Commitment to our employees' development;
• Collaboration in a company that is constantly growing and evolving;
• Strong organisational culture: collaboration, sharing, flexibility, integrity and low ego.

Would you like to join our team? Then send your CV.

The Devoteam Group works for equal opportunities, promoting its employees based on merit and actively fights against all forms of discrimination. We are convinced that diversity contributes to the creativity, dynamism and excellence of our organization. All of our vacancies are open to people with disabilities.