Devoteam Cyber Trust | IAM Engineer | Banking Sector

Description

You will help run and protect the identity systems of a bank, where access rules are strict and heavily regulated.

The environment is hybrid, combining on-premises Active Directory with Microsoft Entra ID, which was formerly called Azure AD.

The team belongs to the cybersecurity specialist arm of a larger group, which has 800+ experts across EMEA and focuses on making security support business goals.

The Portugal-based team has provided managed security services since 2009, including intrusion testing, ISO 27001, PCI-DSS, GRC consulting and third-party risk management, for clients in more than 20 countries.

The unit holds ISO 27001 and ISO 9001 certifications, is PCI-QSA accredited and is a member of CREST and the Center for Internet Security (CIS).

Responsibilities

• Run day-to-day administration and support for on-premises Active Directory and Microsoft Entra ID so access stays smooth and secure.
• Set up and maintain identity synchronisation and lifecycle links through Microsoft Entra Connect, also called Azure AD Connect.
• Configure and enforce Conditional Access, MFA and Privileged Identity Management to protect sensitive banking assets.
• Manage the full joiner, mover and leaver process so risk stays low and operations run well.
• Script routine admin work, identity provisioning and governance tasks with PowerShell and the Microsoft Graph API.
• Work with cyber security, infrastructure and application teams to define and refine identity governance and access control policies.
• Keep the identity setup aligned with banking regulations, security frameworks and internal and external audit standards.
• Write and update documents covering IAM processes, procedures, architecture and configuration.

Requirements

• Hands-on experience running on-premises Active Directory and Microsoft Entra ID (Azure AD).
• Good knowledge of modern and legacy authentication protocols, such as Kerberos, SAML 2.0, OAuth2 and OpenID Connect (OIDC).
• Solid experience configuring, maintaining and troubleshooting Microsoft Entra Connect.
• Very strong PowerShell scripting skills and familiarity with the Microsoft Graph API for automation.
• Practical work with Conditional Access, MFA, PIM and Identity Governance.
• Working knowledge of Microsoft 365, Microsoft Intune and identity integration patterns.
• Sound understanding of security principles, especially Zero Trust Architecture and least privilege in financial institutions.
• Value-add: One of Microsoft Certified Identity and Access Administrator Associate (SC-300), Azure Administrator Associate (AZ-104) or Security Fundamentals (SC-900).
• Value-add: Prior work in medium-to-large hybrid environments within banking or financial services.
• Value-add: Strong problem-solving ability, a methodical approach to troubleshooting and close attention to detail.
• Value-add: Clear communication, stakeholder management and a collaborative approach.

Conditions

All vacancies are open to people with disabilities, and the group promotes equal opportunity on merit and opposes all forms of discrimination.

Benefits

• Support for your professional development and talent growth.
• A commitment to employee development.
• Ongoing collaboration in a company that keeps growing and changing.
• A culture built on collaboration, sharing, flexibility, integrity and a low-ego approach.