Identity and Access Management Engineer; IDAM and Azure

Position: Identity and Access Management Engineer (IDAM and Azure)
Description About Methods Methods is a 100M+ IT Services Consultancy that partners with central government departments, agencies, and commercial organisations to deliver meaningful digital transformation. Established over 30 years ago and UK-based, we combine expertise in transformation, delivery, technology, and collaboration to create people-centred solutions that deliver lasting value.

Predominantly focused on the public sector, whilst continuing to expand its private sector presence, Methods combines deep consulting expertise with the capability and scale of the Alten Group, which acquired Methods in 2022.As part of our continued growth, we are seeking experienced and technically capable Azure Identity and Access Management Engineers to build, secure and manage user identities, access controls and authentication protocols across cloud and hybrid environments.

This role centres on Microsoft Entra , formerly Azure Active Directory, and supports the protection of enterprise systems through Zero Trust security models, strong authentication, least privilege access and effective identity governance.

Requirements

Key Responsibilities The Azure Identity and Access Management Engineer carries out the following activities:
1. Azure IAM Design & Implementation
· Design Azure IAM solutions that align to customer security strategies, business outcomes and technical requirements.
· Build, configure and support Microsoft Entra , including users, groups, enterprise applications, app registrations, administrative roles and tenant settings.
· Implement and secure cloud and hybrid identity architectures, including Active Directory integration, Microsoft Entra Connect, synchronisation, federation and identity migration patterns.
· Configure identity lifecycle processes, including joiner, mover and leaver workflows, role-based access control, entitlement management and access reviews.
· Implement strong authentication and authorisation controls, including multi-factor authentication, Conditional Access, single sign-on, passwordless authentication and privileged identity management.
· Apply Zero Trust principles across identity, device, network, application and data access decisions.
· Produce high-quality technical documentation, including solution designs, configuration guides, deployment plans and support handover materials.
· Work closely with architects, cyber security specialists, engineers and customer stakeholders to ensure Azure IAM solutions are secure, practical and deliverable.
2. Microsoft Entra , Authentication & Access Control
· Build and maintain identity lifecycle processes to manage user access from onboarding through to role changes and leavers.
· Configure and support Microsoft Entra , Active Directory, identity stores, federation services and access management platforms.
· Implement and maintain single sign-on, multi-factor authentication, Conditional Access, passwordless authentication and modern authentication protocols.
· Support identity integration with SaaS platforms, line-of-business applications, Azure services, Microsoft 365 and enterprise infrastructure.
· Develop and support role-based access control, privileged access, access request, approval and recertification processes.
· Troubleshoot identity, authentication, authorisation, synchronisation, Conditional Access and access-related issues.
· Ensure Azure IAM solutions support auditability, compliance, least privilege and secure access to critical systems and data.
3. Zero Trust, Security Governance & Operational Support
· Configure security policies, Conditional Access controls, administrative roles, privileged access processes and identity protection capabilities.
· Implement secure-by-design patterns aligned to Zero Trust, least privilege, assume breach and defence-in-depth principles.
· Support identity governance processes, including access reviews, entitlement management, audit reporting, compliance evidence and policy enforcement.
· Establish monitoring, logging, alerting and operational support processes for Microsoft Entra  hybrid identity services.
· Investigate and resolve identity incidents, risky sign-ins, authentication failures,…