IAM Engineer - Remote

We’re seeking an experienced IAM Engineer to support identity and access management projects across a variety of enterprise environments. This role combines technical delivery, assessment work, and identity transformation initiatives. You’ll work closely with customer stakeholders and technical teams to assess identity maturity, improve access controls, modernise authentication, and implement scalable IAM solutions that balance security with operational requirements.

What You’ll Do

• Assess identity environments across Active Directory, Entra ID, and cloud IAM platforms.
• Review privileged access, group structures, service accounts, and identity governance processes.
• Design and implement Conditional Access, MFA, and privileged access solutions.
• Support identity migrations, tenant consolidations, hybrid identity projects, and application onboarding initiatives.
• Automate identity administration, reporting, provisioning, and governance activities using PowerShell, Microsoft Graph, and related technologies.
• Produce clear remediation plans and technical recommendations for both technical and non-technical stakeholders.
• Deliver identity improvement projects from assessment through to implementation.
• Contribute to the development of repeatable IAM processes, tooling, and best practices.

• Strong hands-on experience with enterprise identity platforms including Active Directory, Microsoft Entra ID, cloud IAM, or a combination of these technologies.
• Background in service desk, infrastructure, systems administration, or operational IAM functions.
• Experience automating identity-related tasks using PowerShell, Microsoft Graph API, or similar technologies.
• Strong understanding of authentication and identity concepts.

• Working knowledge of: o Kerberos o NTLM o SAML o OAuth o OpenID Connect

• Ability to communicate technical findings and recommendations clearly to customers and senior stakeholders.
• Strong written communication skills., + Experience working within consulting, professional services, or managed security environments.
• Exposure to IAM platforms such as Okta, CyberArk, SailPoint, or equivalent technologies.
• Identity governance experience including access reviews, entitlement management, role design, and joiner/mover/leaver automation.
• Familiarity with identity attack path analysis and security assessment tools such as BloodHound or PingCastle.
• AWS or GCP IAM experience.
• Industry certifications such as: o SC-300 o SC-100 o AZ-500 o Equivalent identity and security certifications

• Exposure to a broad range of enterprise-scale environments and identity challenges.
• Ownership of IAM remediation and transformation projects from discovery through implementation.
• Opportunity to build automation and tooling that improves efficiency and delivery quality.
• Clear progression into senior IAM, security consultancy, or architecture-focused roles.
• Ongoing professional development and mentorship opportunities.