General Summary
The Identity & Access Management & Collaboration Services Manager is responsible for implementing, operating, and supporting enterprise identity and access management services. This role ensures the availability, security, and reliability of authentication and access controls across the organization, supporting Active Directory, Azure AD (Entra ID), Microsoft 365, and Okta. The role operates under the direction of IT Infrastructure and Security leadership and collaborates with application, platform, and service teams to support secure access to enterprise and cloud-native systems. This is a hands‑on, execution‑focused role and does not carry enterprise architectural or policy ownership.
Principle Duties and Responsibilities
* Administer and support Active Directory (on‑prem and hybrid), including Domain Controller management, replication troubleshooting, DNS integration, and advanced Group Policy design and implementation.
* Support Azure AD / Entra ID, including hybrid identity synchronization, Conditional Access, and Multi‑Factor Authentication (MFA) configuration to ensure secure and seamless identity management across the organisation.
* Administer and support Okta Single Sign-On (SSO) integrations, ensuring secure authentication flows.
* Support Microsoft 365 identity and access services.
* Execute privileged access management processes (e.g., PIM) in alignment with established security standards, ensuring controlled elevation, proper approvals, and secure administration of high‑risk permissions.
* Support identity integration for Kubernetes‑based workloads, including RBAC and OIDC authentication support.
* Respond to identity‑related incidents and participate in incident investigation and resolution.
* Maintain operational runbooks, diagrams, and support documentation.
* Support audit, compliance, and access review activities.
Knowledge, Skills and Abilities
* Expert level knowledge and experience of Active Directory, Azure AD / Entra ID, Microsoft 365 identity services, and Okta.
* Strong understanding of certificate‑based authentication and its integration with Active Directory, including certificate enrolment, auto‑enrolment, template configuration, and troubleshooting certificate trust and authentication flows.
* Expertise in designing, deploying, and optimizing Azure environments, including secure architecture design, resource provisioning, automation, and best‑practice implementation across cloud infrastructure services.
* Excellent knowledge of security best practice and implementation across on‑prem and cloud environments.
* Thorough understanding of authentication and authorization protocols (SAML, OAuth2, OpenID Connect).
* Experience implementing Conditional Access and Multi‑Factor Authentication.
* Experience in deployment and configuration of MDM (Intune).
* Strong troubleshooting and documentation skills.
* Ability to work effectively with global teams.
* Provide mentorship and guidance to direct and cross‑functional team members.
Mandatory Education and Experience
* Minimum 5-8+ years of experience in AD, Azure AD / Entra ID and Microsoft 365 identity services.
* Bachelor’s degree in IT, Computer Science, or equivalent professional experience.
* Minimum 5 years of experience in identity, directory services, or infrastructure operations.
* Experience supporting identity services in hybrid and cloud environments.
You must have valid right to work in the UK to apply for this role.
Benefits
* Competitive salary
* Opportunities to develop
* Bonus
* 33 days holiday (inclusive of bank holidays)
* Holiday buy and sell
* Pension
* Life Cover
* Employee Assistance Program
* Digital Benefits; Health, Wealth & Lifestyle
CELEROS Flow Technology is an equal opportunity employer.
J-18808-Ljbffr