Devoteam Cyber Trust | IAM Engineer | Banking Sector

Job description

We are seeking a seasoned Identity & Access Management (IAM) Specialist to oversee and secure our identity infrastructure within a highly regulated banking environment. In this role, you will play a key part in maintaining the security, continuity, and compliance of our critical authentication and authorization systems across hybrid environments integrating on-premises Active Directory (AD) and Microsoft Entra ID (formerly Azure AD). Key Responsibilities Identity Management & Operations: Administer, maintain, and support on-premises Active Directory and Microsoft Entra ID to ensure seamless, secure access control. Hybrid Synchronization: Manage identity synchronization and lifecycle integration via Microsoft Entra Connect (Azure AD Connect). Access Control & Zero Trust Security: Implement and enforce Conditional Access policies, Multi-Factor Authentication (MFA), and Privileged Identity Management (PIM) to safeguard sensitive banking assets. Lifecycle Management: Oversee and optimize the full Joiner-Mover-Leaver (JML) identity lifecycle to minimize security risks and ensure operational effectiveness. Automation: Automate routine administrative tasks, identity provisioning, and governance routines using PowerShell and the Microsoft Graph API. Cross-Functional Collaboration: Partner with Cyber Security, Infrastructure, and Application teams to define, align, and refine identity governance and access control policies. Regulatory Compliance & Audit: Ensure strict adherence to banking regulations, security frameworks, and internal/external audit standards. Documentation: Create and maintain comprehensive documentation covering IAM processes, operational procedures, architecture, and configurations. Core Identity: Proven hands-on experience managing on-premises Active Directory and Microsoft Entra ID (Azure AD). Authentication Protocols: Strong knowledge of modern and legacy authentication protocols, including Kerberos, SAML 2.0, OAuth2, and OpenID Connect (OIDC). Hybrid Infrastructure: Solid background in configuring, maintaining, and troubleshooting Microsoft Entra Connect. Automation & Scripting: High proficiency in PowerShell scripting and familiarity with Microsoft Graph API for task automation. Security Controls: Practical expertise with Conditional Access, MFA, PIM, and Identity Governance. Ecosystem Integration: Working knowledge of the broader Microsoft 365 ecosystem, Microsoft Intune, and identity integration patterns. Security Frameworks: Strong understanding of security principles, particularly Zero Trust Architecture and Least Privilege Access in financial institutions. Value-Add Qualifications & Soft Skills Certifications: Microsoft Certified: Identity and Access Administrator Associate ( SC-300 ), Azure Administrator Associate ( AZ-104 ), or Security Fundamentals ( SC-900 ). Banking / Enterprise Scale: Prior experience working in medium-to-large hybrid environments within banking or financial services. Analytical Mindset: Strong problem-solving skills, methodical troubleshooting approach, and high attention to detail. Soft Skills: Excellent communication skills, stakeholder management capabilities, and a collaborative team spirit. What we offer: Professional development and monitoring talent; Commitment to our employees' development; Collaboration in a company that is constantly growing and evolving; Strong organisational culture: collaboration, sharing, flexibility, integrity and low ego. Would you like to join our team? Then send your CV. The Devoteam Group works for equal opportunities, promoting its employees based on merit and actively fights against all forms of discrimination. We are convinced that diversity contributes to the creativity, dynamism and excellence of our organization. All of our vacancies are open to people with disabilities. Devoteam Cyber Trust is the Cybersecurity specialist arm of the Devoteam Group. With our 800+ experts located across EMEA, we aim to establish cybersecurity as an enabler of business success rather than a gatekeeper. We leverage an end-to-end approach to Cyber Resilience, Applied Security, and Managed Security services to secure the tech journey of large and medium-sized companies from all sectors and industries. Since 2009, previously known as INTEGRITY, our team based in Portugal is specialised in providing cutting-edge Managed Security Services that combine its expertise and proprietary technology to consistently and effectively reduce the cyber risk of our clients. The comprehensive service range includes Persistent Intrusion Testing, ISO 27001, PCI-DSS, GRC Consulting and Solutions, and Third-Party Risk Management. ISO 27001 (Information Security) and ISO 9001 (Quality) certified, PCI-QSA, and member of CREST and CIS - Centre for Internet Security, we provide services to a considerable number of clients, operating in more than 20 countries.