IAM Engineer – Banking Sector

About the role

Devoteam Cyber Trust, the cybersecurity specialist arm of the Devoteam Group, is looking for a seasoned Identity & Access Management (IAM) Specialist to oversee and secure the identity infrastructure in a highly regulated banking environment. You will help keep the security, continuity and compliance of authentication and authorization systems running across hybrid environments that combine on-premises Active Directory and Microsoft Entra ID.

Key responsibilities

• Administer, maintain and support on-premises Active Directory and Microsoft Entra ID to ensure secure access control.
• Manage identity synchronization and lifecycle integration via Microsoft Entra Connect (Azure AD Connect).
• Implement and enforce Conditional Access, Multi-Factor Authentication (MFA) and Privileged Identity Management (PIM) to protect sensitive banking assets.
• Oversee the Joiner-Mover-Leaver (JML) identity lifecycle and automate routine tasks, provisioning and governance with PowerShell and the Microsoft Graph API.
• Work with Cyber Security, Infrastructure and Application teams to define and refine identity governance and access control policies.
• Ensure compliance with banking regulations, security frameworks and audit standards, and keep documentation of IAM processes, procedures, architecture and configurations.

Required profile

• Proven hands-on experience managing on-premises Active Directory and Microsoft Entra ID.
• Experience in medium-to-large hybrid environments within banking or financial services.
• Strong problem-solving, methodical troubleshooting and attention to detail.
• Excellent communication, stakeholder management and teamwork skills.

Required skills

• Modern and legacy authentication protocols: Kerberos, SAML 2.0, OAuth2, OpenID Connect.
• Microsoft Entra Connect configuration, maintenance and troubleshooting.
• PowerShell scripting and Microsoft Graph API.
• Conditional Access, MFA, PIM and Identity Governance.
• Working knowledge of Microsoft 365, Microsoft Intune and Zero Trust / Least Privilege principles.
• Certifications such as SC-300, AZ-104 or SC-900 are a value-add.

To apply, send your CV to the company.