Microsoft 365 / Entra ID / SSO / MFA
Role: IAM Engineer
Contract: 6+ months initially
IR35: Inside IR35
Day Rate: Up to £800 per day (via umbrella) potential for flex DOE
Location: Hybrid - 2 days/week on-site in Sheffield, remainder remote
Start: ASAP
Summary
An established well known national organisation is seeking a hands-on IAM Engineer to implement and operate identity, authentication, and access controls across Microsoft 365 and Microsoft Entra ID (Azure AD).
Focus is on SSO, MFA, Conditional Access, identity lifecycle, and privileged access (with CyberArk as a desirable skill). This is a delivery and operations role (not an architect), partnering with Security, Infrastructure, and Service Management to harden controls, reduce risk, and improve user experience.
Responsibilities
1. Entra ID operations & hardening: tenant hygiene, identity security baseline, Conditional Access (CA) design/maintenance, break-glass access.
2. SSO engineering: onboard and support SAML/OIDC apps; configure enterprise app registrations, claims, tokens, and sessio...