EU remote
Devoteam Cyber Trust | IAM Engineer | Banking Sector
About this role
We are seeking a seasoned Identity & Access Management (IAM) Specialist to oversee and secure our identity infrastructure within a highly regulated banking environment. In this role, you will play a key part in maintaining the security, continuity, and compliance of our critical authentication and authorization systems across hybrid environments integrating on-premises Active Directory (AD) and Microsoft Entra ID (formerly Azure AD).
Key Responsibilities Identity Management & Operations: Administer, maintain, and support on-premises Active Directory and Microsoft Entra ID to ensure seamless, secure access control. Hybrid Synchronization: Manage identity synchronization and lifecycle integration via Microsoft Entra Connect (Azure AD Connect). Access Control & Zero Trust Security: Implement and enforce Conditional Access policies, Multi-Factor Authentication (MFA), and Privileged Identity Management (PIM) to safeguard sensitive banking assets.
Lifecycle Management: Oversee and optimize the full Joiner-Mover-Leaver (JML) identity lifecycle to minimize security risks and ensure operational effectiveness. Automation: Automate routine administrative tasks, identity provisioning, and governance routines using PowerShell and the Microsoft Graph API. Cross-Functional Collaboration: Partner with Cyber Security, Infrastructure, and Application teams to define, align, and refine identity governance and access control policies.
Regulatory Compliance & Audit: Ensure strict adherence to banking regulations, security frameworks, and internal/external audit standards. Documentation: Create and maintain comprehensive documentation covering IAM processes, operational procedures, architecture, and configurations. Core Identity: Proven hands-on experience managing on-premises Active Directory and Microsoft Entra ID (Azure AD). Authentication Protocols: Strong knowledge of modern and legacy authentication protocols, including Kerberos, SAML 2.0, OAuth2, and OpenID Connect (OIDC).
Hybrid Infrastructure: Solid background in configuring, maintaining, and troubleshooting Microsoft Entra Connect. Automation & Scripting: High proficiency in PowerShell scripting and familiarity with Microsoft Graph API for task automation. Security Controls: Practical expertise with Conditional Access, MFA, PIM, and Identity Governance. Ecosystem Integration: Working knowledge of the broader Microsoft 365 ecosystem, Microsoft Intune, and identity integration patterns.