Identity Technical Specialist

prosource.it is recruiting an Identity Technical Specialist for an exciting opportunity with a global organisation operating a complex enterprise technology environment. This is a hands‑on technical role focused on delivering a significant programme of identity change, taking ownership of identity‑related activities from planning through to implementation and transition. The successful candidate will play a key role in consolidating identity platforms into a single Microsoft Entra t while helping strengthen identity capability ahead of a wider cloud migration programme.

Working closely with internal technical teams, project stakeholders and an external managed service provider, you will be responsible for delivering secure, scalable and well‑governed identity services.

Location:Aberdeen or London with regular weekly attendance ideally preferred, but flexibility allowing for ad‑hoc on‑site attendance will be considered for the right candidate. Some travel may also be required, including occasional international travel in support of regional activities.

Contract Type
:
Permanent or Contract Considered

Contractors
:
Competitive day rate available for suitable candidates

• Drive the hands‑on technical delivery of a programme of identity change across the organisation's estate, taking technical ownership of work end to end
• Consolidate two identity environments, inherited through an acquisition, into a single Microsoft Entra t and retire the legacy environment
• Build and strengthen the organisation's identity capability ahead of a global cloud migration, so that identity is secure, automated and ready for scale
• Work under the direction of the Platform, Cloud & Identity Manager, alongside the in‑house identity team and an identity managed service provider

• Plan, sequence and execute identity changes across the estate end to end, coordinating technically with the in‑house team, the managed service provider and project teams
• Implement recommendations from a recent IAM assessment, delivering the agreed tactical identity improvements
• Execute the migration of users, groups, applications/SSO, guest (B2B) accounts, devices and dependent services from the legacy identity environment into the target Entra t
• Prepare and run cut‑over and rollback plans, validate outcomes, and safely decommission the legacy identity environment
• Configure and harden Entra  of cloud migration:
  Conditional Access, MFA/passwordless, app integration (SAML/OIDC), Entra Connect / Cloud Sync and hybrid Active Directory
• Automate joiner/mover/leaver processes with HR systems and Service Now; implement access reviews and role‑based access control (RBAC)
• Implement privileged access controls (PIM, admin tiering, break‑glass accounts) and the identity prerequisites for cloud platforms (Azure RBAC, managed identities)
• Produce identity technical documentation, configuration standards and runbooks, and provide audit and controls evidence as required
• Transfer knowledge to the in‑house identity team and support the managed service provider so the identity capability is sustained after the engagement

• Proven hands‑on experience delivering identity and access management solutions within Microsoft Entra
• Hands‑on delivery of an identity consolidation or tenant‑to‑tenant migration (e.g. post‑merger)
• Strong Entra s:
  Conditional Access, MFA, PIM, app registrations/enterprise apps, B2B, Entra Connect / Cloud Sync and hybrid AD
• Experience automating joiner/mover/leaver processes with HR and ITSM systems (ideally Service Now) and implementing RBAC
• Working knowledge of SAML, OIDC, OAuth and SCIM, and Power Shell / Microsoft Graph scripting
• Clear technical documentation skills and experience working alongside managed service providers