Infrastructure Security Engineer - Microsoft Entra

Infrastructure Security Engineer – Microsoft Entra (Identity & Access)

Hybrid role, 2-3 days in the office in Handforth, 1-2 days WFH

Type: 12 months Contract

Reports into Infrastructure Manager

Overview:

We are seeking a skilled Infrastructure Engineer with a strong focus on Microsoft Entra (formerly Azure Active Directory) to join our IT Infrastructure team. The ideal candidate will play a critical role in architecting, deploying, and maintaining secure identity and access solutions, enabling seamless and secure user experiences across our cloud and hybrid environments.

Key Responsibilities:

• Design, implement, and manage solutions built on Microsoft Entra, including Entra ID (Azure AD), Entra Permissions Management, Verified ID, and Conditional Access.
• Configure and maintain identity synchronization (e.g., Azure AD Connect, Entra Connect) and federation services (e.g., AD FS, Entra ID Federation).
• Develop and enforce identity governance policies, including role-based access control (RBAC), just-in-time access, and lifecycle management.
• Manage multi-factor authentication (MFA), self-service password reset (SSPR), and secure hybrid access configurations.
• Implement Conditional Access policies and Microsoft Defender for Identity integrations to enforce Zero Trust principles.
• Collaborate with security and compliance teams to ensure adherence to regulatory and organizational identity standards.
• Provide Tier 3 support and troubleshooting for complex identity and access issues.
• Lead or support migration efforts from legacy identity platforms to Microsoft Entra.
• Contribute to the development of automation and Infrastructure-as-Code (IaC) for identity configuration and governance using tools like PowerShell, Bicep, or Terraform.

Requirements:

Essential:

• 3–5+ years of experience in infrastructure engineering, with a strong focus on identity and access management (IAM).
• Previous experience within a similar scale organisation (10k+ colleagues). Ideally retail, but not essential.
• Deep expertise in Microsoft Entra / Azure Active Directory.
• Experience with Conditional Access, Privileged Identity Management (PIM), and identity lifecycle workflows.
• Hands-on experience with Azure AD Connect, hybrid identity management, and Active Directory.
• Familiarity with scripting and automation tools (e.g., PowerShell, Graph API).
• Strong understanding of Zero Trust security principles.

Desirable:

• Microsoft certifications such as SC-300, AZ-500, or MS-100/MS-101.
• Experience integrating third-party SaaS applications with Entra for SSO and provisioning.
• Knowledge of modern IAM concepts like Decentralized Identity (DID) and Verified ID.
• Exposure to Infrastructure as Code (IaC) using Terraform or Bicep in Azure environments.

Pets just see people. They aren’t biased and they don’t discriminate. We take our inspiration from pets, and we value and respect difference in all its forms. Our aim is to reflect the diversity of the communities we operate in, and every colleague can help us achieve this. We encourage our people to be themselves so even if your skills and experience don’t perfectly align, if you think you can make a unique contribution through your values and behaviours, we want to hear from you!