Identity Engineer; Entra JML

We are seeking an experienced Identity Engineer (Entra  & JML) to manage and support the organisation's identity and access management services, with a primary focus on Microsoft Entra  (Azure AD) and Joiner, Mover, Leaver (JML) processes. The role is responsible for user provisioning and deprovisioning, access management, identity lifecycle administration, authentication services, and ensuring secure, compliant, and efficient access to enterprise systems.

The successful candidate will support identity governance, automate provisioning processes, and work closely with HR, Service Desk, Security, and Infrastructure teams to deliver seamless identity services across the organisation.

• Manage end-to-end Joiner, Mover, and Leaver (JML) processes, ensuring timely creation, modification, and removal of user accounts and access rights.
• Administer Microsoft Entra , including user lifecycle management, group administration, role assignments, and license management.
• Provision, modify, and revoke access to enterprise applications in accordance with approved access requests and security policies.
• Configure and support identity security controls such as Multi-Factor Authentication (MFA), Conditional Access, and Self-Service Password Reset (SSPR).
• Monitor and troubleshoot identity, authentication, and access-related issues, ensuring minimal disruption to users.
• Support identity governance activities, including access reviews, recertification campaigns, and compliance audits.
• Maintain accurate identity records and ensure adherence to security, regulatory, and company compliance requirements.
• Automate provisioning and access management processes to improve efficiency and reduce manual effort.
• Collaborate with HR, Service Desk, Security, and Infrastructure teams to deliver seamless onboarding, role changes, and offboarding experiences.
• Produce and maintain operational documentation, procedures, knowledge articles, and service reports.

Essential skills/knowledge/experience:

• Strong experience administering Microsoft Entra  (Azure AD), including user provisioning, group management, role assignments, and licensing.
• Proven experience managing Joiner, Mover, Leaver (JML) processes and identity lifecycle management within an enterprise environment.
• Good understanding of Identity & Access Management (IAM) principles, access governance, and least‑privilege security models.
• Hands‑on experience with MFA, Conditional Access, Self‑Service Password Reset (SSPR), and authentication management.
• Experience supporting identity provisioning, deprovisioning, and user access requests while maintaining compliance and audit requirements.
• Strong troubleshooting, stakeholder communication, and documentation skills with the ability to work across HR, Service Desk, Security, and Infrastructure teams.

Desirable skills/knowledge/experience:

• Experience with identity governance and administration tools, including automated provisioning and access certification solutions.
• Knowledge of Microsoft 365 security technologies, including Microsoft Defender, Privileged Identity Management (PIM), and Identity Protection.
• Experience integrating HR systems, Service Now, or ITSM platforms with Identity and Access Management processes.
• Familiarity with Power Shell scripting and automation for user provisioning, reporting, and access management tasks.
• Understanding of security, compliance, and audit frameworks such as ISO 27001, GDPR, and Zero Trust principles.