Role Title: IAM Support Engineer
Location: Onsite | Inverness, Cowan House, Highlander Way, Inverness Business & Retail Park, Inverness, IV2 7GE.
Duration: 01/11/2026
Pay Rate: £447/Day
MUST BE PAYE THROUGH UMBRELLA
Role Description: The IAM Support Engineer (L2-L3) will need to provide advanced operational support for enterprise Identity and Access Management services in a Coud, Hybrid and on premises environment. The role focuses on incident resolution, complex request fulfilment, monitoring, reporting, and ad hoc IAM tasks, ensuring services meet defined SLAs, KPIs, and IAM operational metrics. The engineer will provide support across all IAM domains, including identity life cycle management (JML), authentication & authorization (SSO, MFA, conditional RBAC), privileged access (PIM, PRA), certificate management services, and identity governance, working with platforms such as Microsoft Entra ID, Microsoft Identity Manager (MIM), Software IDM, Active Directory, CloudStrike, BeyondTrust PRA, Okta, and AD CS PKI etc.
Key Responsibilities
* Support IAM platforms across cloud, hybrid, and on premises environments.
* Resolve L2-L3 IAM incidents related to JML, access requests, access reviews, authentication, authorization, identity life cycle, privileged access, and certificate services.
* Handle complex IAM service requests, escalated cases, and non standard access requirements.
* Troubleshoot identity sync issues, connector failures, access denials, MFA problems, and certificate based authentication errors.
* Perform root cause analysis and contribute to problem management and service improvement.
* Actively monitor IAM services, integrations, and connectors to ensure service availability and performance.
* Responding to alerts from SIEM/logging solutions and preventing SLA breaches.
* Produce operational and ad hoc reports covering IAM SLAs, KPIs, incidents, and access metrics.
* Support internal/external audit, compliance, and security reporting requests.
* Maintain operational documentation and knowledge articles.
* Identify trends and potential service degradation before SLA breaches occur.
Platforms Supported (Non Exhaustive)
* Microsoft Entra ID (Governance/JML, PIM, AD sync, Conditional Access Policies, Service Principles, MFA, directory operations)
* Microsoft Identity Manager (On-prem/Legacy JML)
* Software IDM (Auditing and Visibility)
* Active Directory (Directory operations - User, groups, GPOs etc)
* Okta (SSO, MFA, life cycle management)
* BeyondTrust (PRA PAM operations and troubleshooting)
* CloudStrike (MFA, conditional access control and monitoring)
* AD CS/PKI (certificate tracking, issuance, renewal, and incidents)
Skills & Experience
* Strong hands on experience in L2-L3 IAM operations and support.
* Solid understanding of identity life cycle (JML & IGA), SSO, MFA, RBAC, PAM, and PKI concepts.
* Hands‑on experience with one or more of the following platforms: Entra ID, MIM, Software IDM, AD, Okta, BeyondTrust, CloudStrike, AD CS/PKI.
* Experience working in ITIL based support environments with SLAs and KPIs.
* Strong troubleshooting, analytical, and communication skills.
* Ability to collaborate effectively with security, infrastructure, and application teams.
* Attention to detail and commitment to security and compliance.
Desirable/Nice to Have
* IAM or security‑related certifications (eg, Microsoft Identity tools, Okta, ITIL, CyberArk/BeyondTrust etc).
* Experience supporting hybrid or multi cloud environments.
* Exposure to security monitoring, SIEM, or audit frameworks.
#J-18808-Ljbffr