Devoteam

Devoteam Cyber Trust | IAM Engineer | Banking Sector

In short

This remote senior IAM Engineer role, posted by Devoteam Cyber Trust (cybersecurity arm of Devoteam Group), involves securing identity infrastructure for a highly regulated banking client across hybrid Active Directory and Microsoft Entra ID environments. The scope covers identity lifecycle management, Conditional Access/MFA/PIM, and automation via PowerShell and Microsoft Graph API. It demands hands-on AD/Entra ID expertise, knowledge of authentication protocols (Kerberos, SAML, OAuth2, OIDC), and prior banking or financial-services experience.

About Devoteam Cyber Trust
Devoteam Cyber Trust is the Cybersecurity specialist arm of the Devoteam Group. With our 800+ experts located across EMEA, we aim to establish cybersecurity as an enabler of business success rather than a gatekeeper. We leverage an end-to-end approach to Cyber Resilience, Applied Security, and Managed Security services to secure the tech journey of large and medium-sized companies from all sectors and industries. Since 2009, previously known as INTEGRITY, our team based in Portugal is specialised in providing cutting-edge Managed Security Services that combine its expertise and proprietary technology to consistently and effectively reduce the cyber risk of our clients. The comprehensive service range includes Persistent Intrusion Testing, ISO 27001, PCI-DSS, GRC Consulting and Solutions, and Third-Party Risk Management. ISO 27001 (Information Security) and ISO 9001 (Quality) certified, PCI-QSA, and member of CREST and CIS - Centre for Internet Security, we provide services to a considerable number of clients, operating in more than 20 countries.
Responsibilities
We are seeking a seasoned Identity & Access Management (IAM) Specialist to oversee and secure our identity infrastructure within a highly regulated banking environment. In this role, you will play a key part in maintaining the security, continuity, and compliance of our critical authentication and authorization systems across hybrid environments integrating on-premises Active Directory (AD) and Microsoft Entra ID (formerly Azure AD).
•Identity Management & Operations: Administer, maintain, and support on-premises Active Directory and Microsoft Entra ID to ensure seamless, secure access control.
•Hybrid Synchronization: Manage identity synchronization and lifecycle integration via Microsoft Entra Connect (Azure AD Connect).
•Access Control & Zero Trust Security: Implement and enforce Conditional Access policies, Multi-Factor Authentication (MFA), and Privileged Identity Management (PIM) to safeguard sensitive banking assets.
•Lifecycle Management: Oversee and optimize the full Joiner-Mover-Leaver (JML) identity lifecycle to minimize security risks and ensure operational effectiveness.
•Automation: Automate routine administrative tasks, identity provisioning, and governance routines using PowerShell and the Microsoft Graph API.
•Cross-Functional Collaboration: Partner with Cyber Security, Infrastructure, and Application teams to define, align, and refine identity governance and access control policies.
•Regulatory Compliance & Audit: Ensure strict adherence to banking regulations, security frameworks, and internal/external audit standards.
•Documentation: Create and maintain comprehensive documentation covering IAM processes, operational procedures, architecture, and configurations.
Requirements
•Core Identity: Proven hands-on experience managing on-premises Active Directory and Microsoft Entra ID (Azure AD).
•Authentication Protocols: Strong knowledge of modern and legacy authentication protocols, including Kerberos, SAML 2.0, OAuth2, and OpenID Connect (OIDC).
•Hybrid Infrastructure: Solid background in configuring, maintaining, and troubleshooting Microsoft Entra Connect.
•Automation & Scripting: High proficiency in PowerShell scripting and familiarity with Microsoft Graph API for task automation.
•Security Controls: Practical expertise with Conditional Access, MFA, PIM, and Identity Governance.
•Ecosystem Integration: Working knowledge of the broader Microsoft 365 ecosystem, Microsoft Intune, and identity integration patterns.
•Security Frameworks: Strong understanding of security principles, particularly Zero Trust Architecture and Least Privilege Access in financial institutions.
•Certifications: Microsoft Certified: Identity and Access Administrator Associate (SC-300), Azure Administrator Associate (AZ-104), or Security Fundamentals (SC-900).
•Banking / Enterprise Scale: Prior experience working in medium-to-large hybrid environments within banking or financial services.
•Analytical Mindset: Strong problem-solving skills, methodical troubleshooting approach, and high attention to detail.
•Soft Skills: Excellent communication skills, stakeholder management capabilities, and a collaborative team spirit.
What we offer
•Professional development and monitoring talent
•Commitment to our employees' development
•Collaboration in a company that is constantly growing and evolving
•Strong organisational culture: collaboration, sharing, flexibility, integrity and low ego

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot