Identity & Access Management (IAM) Security Engineer

Introduction

12 Month Contract | JHB - Hybrid | A leading financial services client is seeking an Identity & Access Management (IAM) Security Engineer to strengthen and manage identity security across Microsoft Entra ID and integrated enterprise platforms. The successful candidate will be responsible for implementing Zero Trust identity controls, securing privileged access, enforcing strong authentication, and ensuring identity governance meets regulatory, audit, and organisational security standards.

Job Description

• Configure and manage Microsoft Entra ID security controls, including Conditional Access, Identity Protection, Multi-Factor Authentication (MFA), and Privileged Identity Management (PIM).

• Design and implement secure role-based and group-based access models that enforce least privilege and separation of duties across enterprise applications and infrastructure.

• Support secure identity lifecycle processes by developing technical security controls, automation, and governance for joiners, movers, and leavers.

• Monitor and respond to identity-related threats, including risky sign-ins, impossible travel alerts, privileged access anomalies, legacy authentication usage, and suspicious MFA activity.

• Lead periodic user access reviews, privileged access attestations, and remediation of orphaned or dormant accounts.

• Produce regular reporting and metrics on identity security, including MFA adoption, privileged access coverage, deprovisioning effectiveness, and access governance compliance.

• Collaborate with Endpoint Security, Cloud Security, Infrastructure, and Application teams to align identity controls with Zero Trust and Conditional Access strategies.

• Support secure implementation of Single Sign-On (SSO), federation, and external identity integrations with partners and third-party applications.

• Ensure identity security controls meet audit, governance, and regulatory requirements while maintaining comprehensive documentation and evidence.

• Recommend and implement continuous improvements to identity security architecture, authentication methods, privileged access management, and access governance processes.

• Work closely with Cyber Security, Infrastructure, HR, and Application Owners to strengthen enterprise identity security and reduce organisational risk.

Minimum Requirements

• Bachelor's Degree or Diploma in Information Technology, Computer Science, Cyber Security, or a related field.

• Minimum 5 years' experience in Identity & Access Management (IAM), Cyber Security, or Infrastructure Security.

• At least 3 years' hands-on experience administering Microsoft Entra ID (Azure Active Directory) in an enterprise environment.

Strong experience with

• Microsoft Entra ID (Azure AD)

• Conditional Access Policies

• Microsoft Identity Protection

• Privileged Identity Management (PIM)

• Multi-Factor Authentication (MFA) including Microsoft Authenticator and FIDO2

• Self-Service Password Reset (SSPR)

• Entra ID RBAC, Access Reviews, and Entitlement Management

• Hybrid Identity (Active Directory, Entra Connect, Hybrid Azure AD Join)

• Single Sign-On (SSO), SAML, OAuth 2.0, and OpenID Connect (OIDC)

• Experience implementing Zero Trust identity security principles and least privilege access models.

• Knowledge of identity governance, privileged access management, and regulatory compliance requirements.

• Experience supporting audit activities and producing identity governance reporting.

• Strong analytical, troubleshooting, stakeholder management, and communication skills.

Package & Remuneration

Salary Market Related