Identity Technical Specialist - Contract - 6 months - Remote

Project overview

Identity Technical Specialist

We are looking for an Identity Technical Specialist with hands-on Microsoft Entra ID experience to drive a major identity change programme for a leading provider of business technology solutions across the Energy, Public and Finance sectors. You will consolidate two identity environments, inherited through an acquisition, into a single Entra ID tenant and retire the Legacy estate ahead of a global cloud migration. You will work under the Platform, Cloud & Identity Manager alongside the in-house identity team and a managed service provider.

Responsibilities

What You Will Ideally Bring:

Contract Details

• Plan, sequence and execute identity changes across the estate end to end, coordinating with the in-house team, the managed service provider and project teams
• Migrate users, groups, applications/SSO, B2B guest accounts, devices and dependent services from the Legacy environment into the target Entra ID tenant
• Prepare and run cut-over and rollback plans, validate outcomes and safely decommission the Legacy identity environment
• Configure and harden Entra ID ahead of cloud migration: Conditional Access, MFA/passwordless, SAML/OIDC app integration, Entra Connect/Cloud Sync and hybrid AD
• Automate joiner/mover/leaver processes with HR systems and ServiceNow, and implement access reviews and RBAC
• Implement privileged access controls (PIM, admin tiering, break-glass accounts) and the identity prerequisites for cloud platforms (Azure RBAC, managed identities)
• Deliver the agreed tactical improvements from a recent IAM assessment, produce documentation and runbooks, and hand over knowledge to the in-house team
• Proven hands-on IAM experience, ideally in Microsoft Entra ID environments
• Hands-on delivery of an identity consolidation or tenant-to-tenant migration (eg post-merger)
• Strong Entra ID skills: Conditional Access, MFA, PIM, app registrations/enterprise apps, B2B, Entra Connect/Cloud Sync and hybrid AD
• Experience automating joiner/mover/leaver processes with HR and ITSM systems (ideally ServiceNow) and implementing RBAC
• Working knowledge of SAML, OIDC, OAuth and SCIM
• PowerShell and Microsoft Graph scripting
• Clear technical documentation skills and experience working alongside managed service providers
• SailPoint or One Identity Manager, SC-300 certification, Zero Trust awareness, SAP access/emergency access controls, or energy/critical-infrastructure sector experience (desirable)
• Duration: 6 months
• Day Rate: £400 -£450
• Determination: Inside IR35
• Location: Remote
• Start Date: ASAP

Project details

• Start: ASAP
• Duration: 6 months
• Location: Remote, UK, GB
• Rate: 50-56 EUR/h