About the role
Key Accountabilities and main responsibilities Strategic Focus
- Support the secure and reliable operation of identity and access management services across the organisation.
- Contribute to IAM, PAM and identity governance initiatives through project delivery and operational support activities.
- Assist in implementing identity standards, controls and automation aligned with the organisation’s security strategy.
- Support continuous improvement of identity lifecycle, authentication and privileged access capabilities.
- Manage approved joiner, mover and leaver activities, including user provisioning, de-provisioning, access changes and routine IAM troubleshooting.
- Provision, modify and remove user, service and privileged accounts across supported on-premises and cloud platforms.
- Apply approved access models, including role-based and attribute-based access controls, group membership and entitlements.
- Support periodic access reviews and follow up outstanding certifications, exceptions and remediation actions.
- Assist with the administration, configuration, testing and support of hybrid Active Directory and Microsoft Entra ID environments.
- Support application onboarding for single sign-on, multifactor authentication and automated provisioning using SAML 2.0, OAuth 2.0, OpenID Connect and SCIM.
- Contribute to PowerShell, Microsoft Graph and other scripts or workflows that automate repeatable IAM activities, with peer review before production use.
- Assist with identity services hosted across Azure and AWS and their supporting Windows, Linux and virtualised infrastructure.
- Maintain daily IAM platform stability and compliance through service monitoring, BAU engineering, incident troubleshooting, fulfilment of service requests and controlled changes.
- Troubleshoot access, authentication, federation, directory and provisioning issues using documented procedures, system logs and structured diagnostic techniques.
- Support Active Directory Domain Services and related technologies such as LDAP, Group Policy, DNS, certificate services, forest trusts and remote access services under appropriate guidance.
- Maintain accurate tickets, work notes, configuration records, operational procedures and handover information.
- Build effective working relationships with application owners, Service Desk, infrastructure, cloud, security and project teams.
- Collaborate with senior engineers and Identity Architects to deliver IAM and PAM enhancements.
- Demonstrate accountability, teamwork and a commitment to continuous learning.
- Share knowledge and contribute to team capability through structured learning and practical assignments.
- Support the discovery and onboarding of privileged accounts across servers, databases, cloud platforms and enterprise applications.
- Assist with implementation and uplift of privileged-access controls, including conditional access, multifactor authentication, least privilege, account discovery and automated password rotation.
- Follow least-privilege, segregation-of-duties, privacy and privileged-access requirements when administering identity services.
- Support audit and assurance activities by maintaining complete access records, approvals, evidence and operational documentation.
- Identify control gaps, recurring incidents and opportunities for automation or service improvement and escalate recommendations through the appropriate process.
- Escalate risks, exceptions and complex technical matters through appropriate governance processes.
Experience & Personal Attributes Experience
- Degree, diploma or equivalent practical training in information technology, computer science, cybersecurity or a related discipline.
- 4+ years of relevant experience in IAM, directory services, systems administration, IT support or cybersecurity; graduates with relevant practical exposure are encouraged to apply.
- Foundational understanding of identity lifecycle management, authentication, authorisation, least privilege, conditional access, multifactor authentication, RBAC and ABAC.
- Practical exposure to Active Directory and Microsoft Entra ID in a hybrid environment; familiarity with Microsoft Identity Manager or Entra ID Connect is advantageous.
- Working knowledge of SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, LDAP, federation and API concepts.
- Basic to intermediate PowerShell and scripting capability; exposure to Microsoft Graph is desirable.
- Awareness of Windows Server and Active Directory services, including Group Policy, DNS, certificate services and forest trusts.
- Foundational cloud knowledge across Azure or AWS and basic familiarity with virtualisation; Linux exposure is desirable.
- Exposure to PAM or IGA platforms such as CyberArk and SailPoint is advantageous.
- Relevant Microsoft, cloud, IAM or security certifications are desirable but not essential.
- Strong problem-solving and troubleshooting skills, with the ability to work independently on assigned tasks and seek guidance for complex or high-risk matters.
- Balanced interest in operational support, incident resolution, debugging and engineering delivery.
- Strong attention to detail and a disciplined approach to approvals, testing, evidence and record keeping.
- Clear written and verbal communication skills and the ability to build constructive relationships with technical teams and business partners.
- Able to prioritise assigned work, meet agreed deadlines, raise blockers early and contribute effectively in a complex enterprise environment.
- Demonstrates integrity, accountability, teamwork and a commitment to continuous learning.