Azure Cloud Engineer – IDAM SME

Contract (6 months) |  3 Days On-site / 2 Days Remote  | 

The Opportunity

We're looking for a hands-on Azure Identity & Access Management specialist to join a high-performing cloud team. This is a contract engagement focused on identity consolidation and separation work, with a strong emphasis on Privileged Identity Management (PIM) and governance. You'll be embedded in a collaborative team of ~8 cloud engineers, working to both project deliverables and BAU obligations.

What You'll Be Doing

•     Leading identity consolidation and separation initiatives across Azure AD / Entra ID environments

•     Designing and implementing Privileged Identity Management (PIM) policies and controls

•     Managing RBAC frameworks and access governance across cloud and hybrid environments

•     Collaborating with cloud architects and security teams to enforce identity best practices

•     Contributing to IaC automation using Terraform for identity-related deployments

•     Supporting hybrid AD environments including on-prem Active Directory integration

•     Documenting identity architectures, access policies and operational runbooks

•     Handling BAU tasks including on-prem AD administration as required

What We're Looking For

•     Deep, demonstrable hands-on experience with Azure AD

•     Proven track record in identity consolidation and/or separation projects

•     Strong working knowledge of Privileged Identity Management (PIM) and privileged access controls

•     Solid understanding of RBAC, conditional access, and identity governance in Azure

•     Experience with Terraform or similar IaC tooling for identity/access automation

•     Familiarity with hybrid environments (on-prem AD + Azure AD)

•     Relevant Azure certification (e.g. AZ-104, AZ-500, SC-300 or equivalent)

•     Strong communication skills — able to articulate identity concepts to non-technical stakeholders

Nice to Have

•     Experience with Microsoft Purview or Microsoft Entra Permissions Management

•     Exposure to Azure Landing Zone design with identity as a core pillar

•     Prior experience working within large enterprise or government environments

The Detail

•     Contract engagement, initial term with likely extension

•     3 days on-site, 2 days remote per week

•     Working with Children Check (or eligibility) required prior to start

•     National Criminal History Check required