MFA Engineer

Project overview

We're partnering with a leading financial services client on a strategic Identity and Access Management transformation programme and are looking for an experienced MFA Engineer to help deliver modern authentication capabilities across a complex enterprise environment.

This is a hands-on engineering role requiring strong experience across MFA, IAM and authentication technologies, alongside the ability to work effectively with architecture, cybersecurity, application and infrastructure teams.

• Inside IR35
• Remote-based, with the potential requirement to work from Sheffield 2-days per week if a new office policy is introduced.

Requirements

Desirable:

This is a key opportunity to play a hands-on role in a major enterprise IAM transformation, helping shape and deliver the future of authentication across a complex financial services environment.

• Strong hands-on experience engineering MFA and SSO within enterprise IAM environments
• Deep understanding of modern authentication and federation protocols, particularly OIDC/OAuth2 and SAML
• Experience with at least one enterprise Identity Provider platform
• Strong understanding of authentication vs authorisation, identity life cycle and trust boundaries
• Working knowledge of PKI, certificates, TLS and key management
• Experience operating production IAM services, including monitoring, incident and change management
• Strong communication and stakeholder management skills, with the confidence to challenge and influence technical decisions
• Ability to work across architecture, cybersecurity, infrastructure and application teams
• Entra ID/Azure AD experience
• FIDO2/WebAuthn and phishing-resistant MFA experience
• PowerShell and/or Python Scripting and API experience
• Zero Trust and adaptive/risk-based authentication knowledge
• PAM and privileged authentication experience
• Cloud and hybrid identity experience across Azure, AWS or GCP
• Experience in financial services or other regulated environments
• Relevant IAM, security or Microsoft Identity certifications

Project details

• Start: flexible
• Duration: 6 months
• Remote: hybrid
• Location: Yorkshire, United Kingdom, GB