Senior Microsoft Entra IAM Engineer

You will act as a Senior Consultant and trusted Microsoft identity specialist. Working in partnership with an IAM Governance Analyst, you will translate operational and control needs into supportable technical solutions across Microsoft Entra, Azure and the wider Microsoft ecosystem.

This role suits an engineer who is equally comfortable improving a live service, diagnosing identity-data problems and applying software engineering practices to secure automation.

Your Role in a Nutshell

• Configure, support and enhance user access review capabilities using Microsoft Entra ID Governance and associated Microsoft services.
• Build and maintain automation using Microsoft Graph, PowerShell, APIs and appropriate Azure services.
• Ingest, transform and reconcile identity, application, entitlement and ownership data required for review campaigns.
• Develop secure CI/CD pipelines, source-control practices, automated testing and deployment controls for IAM scripts and configuration.
• Monitor scheduled processes, troubleshoot failures and implement resilient logging, alerting, retry and recovery patterns.
• Apply least-privilege, secrets-management and privileged-access controls to engineering and operational solutions.
• Partner with governance analysts to turn process, policy and audit requirements into maintainable technical designs.
• Create technical documentation, runbooks and handover materials, and contribute to service reporting and continuous improvement.

• Strong hands-on experience engineering identity and access management solutions in Microsoft Entra ID and Azure environments.
• Practical experience with Microsoft Entra ID Governance capabilities such as Access Reviews, Entitlement Management or Privileged Identity Management.
• Experience automating Microsoft cloud administration using Microsoft Graph and PowerShell.
• Ability to work with REST APIs, structured data formats and identity data from multiple authoritative or target systems.
• Experience designing and maintaining CI/CD pipelines in Azure DevOps or an equivalent platform, including source control and peer review.
• Strong understanding of authentication, authorisation, RBAC, least privilege, service principals and managed identities.
• Experience supporting production automation, including monitoring, incident investigation, defect resolution and controlled change.
• Clear communication skills and the ability to collaborate with analysts, security specialists, application teams and client stakeholders.

Desirable Experience

• Experience with Infrastructure as Code using Bicep, Terraform or ARM templates.
• Knowledge of hybrid identity, on-premises Active Directory and identity synchronisation patterns.
• Experience with Azure Functions, Logic Apps, Automation Accounts, Key Vault, Log Analytics or similar Azure services.
• Understanding of audit evidence, access recertification controls and regulated operational environments.
• Microsoft Certified: Identity and Access Administrator Associate or comparable Microsoft identity/security certification.

Alongside working with some of the most talented people out there and on-top of a competitive salary, which we’re transparent about from the outset, you can also expect a range of benefits:

• Contributory Pension Scheme (Hippo 6% & Employee 2%)
• 25 Days Holiday plus UK Public Holidays
• Perkbox access for a wide range of discounts
• Critical illness cover
• Life assurance and death in service cover
• Volunteer days
• Cycle-to-work scheme for the avid cyclists
• Salary sacrifice electric vehicles scheme
• Season ticket loans
• Financial and general wellbeing sessions
• Flexible benefits scheme with options of:
• Private health cover
• Private dental cover
• Additional company pension contributions
• Additional holidays (up to an extra 2 days)
• Wellbeing contribution
• Charity contributions
• Tree planting

Diversity, Inclusion and Belonging at Hippo

At Hippo, we’re dedicated to creating a diverse, equitable and inclusive workplace that works for everyone. We understand that having a diverse team unlocks our capacity for innovation, creativity and problem solving. Only by building a community of diverse perspectives, cultures and socio-economic backgrounds can we create an environment where all can contribute and thrive.

We actively encourage applications from underrepresented groups including women, ethnic minorities, LGBTQ+, neurodivergent and people with disabilities. We are committed to providing an inclusive and accessible recruitment process that reflects our workplace culture. We are a registered Disability Confident Employer, Mindful Employer, Endometriosis Friendly Employer and a member of the Armed Forces Covenant. Hippo continually strives to remove barriers, provide accommodations and offer reasonable adjustments to ensure equity throughout our practices.

At Hippo, we design with empathy and build for impact. We do this by combining data-informed evidence, human-centred design and software engineering. We’re a digital services partner who is genuinely invested in helping our clients thrive as modern organisations. Our delivery methodology is truly agile, from concept to reality, supporting innovation and continuous improvement to achieve your desired outcomes.

We firmly believe that technology should serve humanity, not the other way around. We take a human-centred approach to everything we do because we understand that complex problems require a service design approach. This means understanding how users behave and ensuring our solutions work for them in the real world.

Our combination of data, design, and engineering delivers bespoke digital services that make a positive and meaningful impact on organisations and society.

Have a look through our Website at Our Story & Purpose, Our Culture & Values, Case Studies and Our Solutions & Services to find out some more!

Hippo Locations

We are headquartered in Leeds and have offices across the UK in Glasgow, Manchester, Birmingham, London and Bristol. We’re on the lookout for top talent nationwide but you need to be located within reasonable travelling distance from one of our offices. Given the dynamic nature of a consulting business, you may be required to work on-site at a Hippo office or at an in/out of town client location for a number of days per week (client dependent) and therefore candidates will need to be open/flexible to travel and working on one of those sites at least 2 days per week. We offer a generous relocation support package of up to £8,000 (please ask for terms and conditions) to help make your move a smooth one.