IAM Consultant/Developer - UK, fully remote
This is the employer's own posting, not a copy on a job board.
What we know
Is it still open?
Confirmed still open
Last checked 8h ago — checked against the employer's own applicant tracking system, which is the company answering directly.
We re-read the employer's own applicant tracking system and the posting was still there. That is the company answering directly.
How old is it?
First seen 10d ago
No source stated a posting date, so this is when the listing first reached us — which is a floor, not the real age. Last seen at its source 4h ago.
We have tracked this listing since 23 Oct 2026 (10 days). The employer's own board has carried it every time we have read it, most recently 4 hours ago.
Is it remote?
Remote, UK
That is the location the employer filed this posting under. Quoted as written — we do not re-word the source's own location.
Who may apply?
United Kingdom
The description states no restriction of its own. This is the source's own tag.
Pay not stated
Similar roles pay £77.6k–131.8k/yr
Middle 50% of 108 listings that do state pay — Engineering · all levels · United Kingdom · GBP/year. This employer has published no salary; this is what comparable listings we hold disclose, never converted between currencies or periods. How this is calculated.
Skills named in the ad
Recognised terms only, from a fixed vocabulary — this is what CV matching compares against.
Carried by 1 source
-
Pinpoint employer's own board first seen 10d ago · last seen 4h ago
The listing
We're looking for a hands-on IAM Consultant/Developer to join Colibri Digital on client engagement, supporting a major Microsoft Entra ID implementation.
What You'll Be Doing
- Discovery & design — audit the existing identity estate (on-prem AD, and/or third-party IdP such as Okta or Ping) and design the target-state architecture in Microsoft Entra ID.
- Migration execution — plan and run the cutover, including phased/staged migration approaches to minimise disruption to live services.
- Hybrid identity — configure and manage synchronization between on-prem and cloud using Microsoft Entra Connect or Entra Cloud Sync during the transition period.
- Authentication & security — implement MFA, Conditional Access policies, and passwordless sign-in aligned to Zero Trust principles.
- Application integration — migrate or re-establish SSO for enterprise applications using SAML, OAuth 2.0, and OIDC.
- Identity governance — stand up Privileged Identity Management (PIM), Entitlement Management (access packages), and Access Reviews as part of the target state.
- Cutover support & troubleshooting — monitor sign-in/audit logs and identity protection signals during and after migration to catch issues early.
- Documentation & handover — leave the operations team with clear runbooks and a clean handover once migration is complete.
What We're Looking For
Essential:
- Proven experience delivering a migration onto Microsoft Entra ID (formerly Azure AD) — from on-prem AD DS or from a third-party IdP (Okta, Ping, ForgeRock, etc.).
- Demonstrable Experience owning migrations of large user bases (500k+)
- Strong working knowledge of Conditional Access, Zero Trust security models, and modern authentication protocols (SAML 2.0, OAuth 2.0, OIDC).
- Experience with DNS, TLS certificates and Load Balancers.
- Confident PowerShell scripting for identity lifecycle automation, ideally via the Microsoft Graph PowerShell SDK.
- Comfortable working independently and communicating migration risk/status to non-technical stakeholders.
- KQL for log analysis in Microsoft Sentinel or Azure Monitor.
- Experience with Entra ID B2B/B2C.
- Background with an alternative IAM platform (ForgeRock, Ping, Okta) — genuinely useful for migration work, since you understand what you're migrating from, not just what you're migrating to.
- Experience with API Gateway, API Management platforms
- SC-300 (Identity and Access Administrator Associate)
- SC-100 (Cybersecurity Architect Expert)
- SC-500 (Cloud and AI Security Engineer Associate)
- CISSP