Identity and Access Management Engineer (IDAM and Azure)

About Methods

Methods is a £100M+ IT Services Consultancy that partners with central government departments, agencies, and commercial organisations to deliver meaningful digital transformation. Established over 30 years ago and UK-based, we combine expertise in transformation, delivery, technology, and collaboration to create people-centred solutions that deliver lasting value.

Predominantly focused on the public sector, whilst continuing to expand its private sector presence, Methods combines deep consulting expertise with the capability and scale of the Alten Group, which acquired Methods in 2022.

As part of our continued growth, we are seeking experienced and technically capable Azure Identity and Access Management Engineers to build, secure and manage user identities, access controls and authentication protocols across cloud and hybrid environments.

This role centres on Microsoft Entra ID, formerly Azure Active Directory, and supports the protection of enterprise systems through Zero Trust security models, strong authentication, least privilege access and effective identity governance.

Requirements

Key Responsibilities

The Azure Identity and Access Management Engineer carries out the following activities:

1. Azure IAM Design & Implementation

· Design Azure IAM solutions that align to customer security strategies, business outcomes and technical requirements.

· Build, configure and support Microsoft Entra ID environments, including users, groups, enterprise applications, app registrations, administrative roles and tenant settings.

· Implement and secure cloud and hybrid identity architectures, including Active Directory integration, Microsoft Entra Connect, synchronisation, federation and identity migration patterns.

· Configure identity lifecycle processes, including joiner, mover and leaver workflows, role-based access control, entitlement management and access reviews.

· Implement strong authentication and authorisation controls, including multi-factor authentication, Conditional Access, single sign-on, passwordless authentication and privileged identity management.

· Apply Zero Trust principles across identity, device, network, application and data access decisions.

· Produce high-quality technical documentation, including solution designs, configuration guides, deployment plans and support handover materials.

· Work closely with architects, cyber security specialists, engineers and customer stakeholders to ensure Azure IAM solutions are secure, practical and deliverable.

2. Microsoft Entra ID, Authentication & Access Control

· Build and maintain identity lifecycle processes to manage user access from onboarding through to role changes and leavers.

· Configure and support Microsoft Entra ID, Active Directory, identity stores, federation services and access management platforms.

· Implement and maintain single sign-on, multi-factor authentication, Conditional Access, passwordless authentication and modern authentication protocols.

· Support identity integration with SaaS platforms, line-of-business applications, Azure services, Microsoft 365 and enterprise infrastructure.

· Develop and support role-based access control, privileged access, access request, approval and recertification processes.

· Troubleshoot identity, authentication, authorisation, synchronisation, Conditional Access and access-related issues.

· Ensure Azure IAM solutions support auditability, compliance, least privilege and secure access to critical systems and data.

3. Zero Trust, Security Governance & Operational Support

· Configure security policies, Conditional Access controls, administrative roles, privileged access processes and identity protection capabilities.

· Implement secure-by-design patterns aligned to Zero Trust, least privilege, assume breach and defence-in-depth principles.

· Support identity governance processes, including access reviews, entitlement management, audit reporting, compliance evidence and policy enforcement.

· Establish monitoring, logging, alerting and operational support processes for Microsoft Entra ID and hybrid identity services.

· Investigate and resolve identity incidents, risky sign-ins, authentication failures, account issues and access control defects.

· Support testing, release management, migration activity and transition into live service.

· Contribute to technical assurance reviews, identifying risks, dependencies and improvement opportunities across Azure IAM environments.

· Maintain awareness of emerging identity threats, Microsoft Entra updates, cloud identity developments and IAM best practice.

4. Collaboration & Capability Development

· Work collaboratively with delivery teams, architects, cyber security specialists, business analysts and customer stakeholders to translate requirements into secure IDAM solutions.

· Support pre-sales and discovery activity by providing technical input, estimates and solution options where required.

· Contribute to reusable Methods assets, accelerators, templates and delivery standards for identity and access management.

· Share knowledge with colleagues and support the development of Methods' wider cyber security, cloud and Microsoft capability.

Desirable Skills & Experience

· Proven experience designing, implementing, configuring or supporting Azure Identity and Access Management solutions.

· Strong understanding of Microsoft Entra ID, Active Directory, cloud and hybrid identity, authentication, authorisation, federation, access governance and privileged access management.

· Experience with Microsoft Entra ID capabilities, including Conditional Access, MFA, single sign-on, app registrations, enterprise applications, identity protection, entitlement management and privileged identity management.

· Knowledge of authentication protocols and identity standards such as SAML, OAuth, OpenID Connect, LDAP and Kerberos.

· Experience integrating identity services with Azure, Microsoft 365, SaaS applications, enterprise applications and on-premises infrastructure.

· Understanding of Zero Trust, least privilege, identity governance, audit, compliance and cyber security best practice.

· Ability to troubleshoot identity, access, authentication, synchronisation, Conditional Access and permission-related issues.

· Experience working in Agile delivery teams and producing clear technical documentation.

· Strong stakeholder management and communication skills, with the ability to explain technical concepts to technical and non-technical audiences.

· Self-motivated, collaborative and able to work across multiple client environments and delivery priorities.

Professional Qualifications (Desirable)

· Microsoft Certified: Identity and Access Administrator Associate

· Microsoft Certified: Security Operations Analyst Associate

· Microsoft Certified: Azure Security Engineer Associate

· Microsoft Certified: Azure Administrator Associate

· Microsoft Certified: Cybersecurity Architect Expert, or equivalent, would be advantageous

· Agile Practitioner, Scrum Master, PRINCE2, or equivalent delivery qualification

Why Join Methods?

· Opportunity to design and deliver secure Azure IAM and Microsoft Entra ID solutions for complex cloud and hybrid client environments.

· Work alongside experienced consultants, architects, engineers, cyber security specialists and digital transformation professionals.

· Access to continuous learning, Microsoft certification support and professional development.

· Be part of a collaborative, people-centred organisation that values innovation, delivery excellence and long-term customer relationships.

· Contribute to the growth of Methods' cyber security, cloud, Microsoft and Zero Trust capability across public and private sector clients.

This role will require you to have, or be willing to undergo, appropriate security clearance depending on client requirements.

Benefits

By joining us you can expect:

• Autonomy to develop and grow your skills and experience
• Be part of exciting project work that is making a difference in society
• Strong, inspiring and thought-provoking leadership
• A supportive and collaborative environment.

As well as this, we offer:

• Development access to LinkedIn Learning, a management development programme and training
• Wellness 24/7 Confidential employee assistance programme
• Social - Breakfast Tuesdays, Thirsty Thursdays and Pizza on the last Thursday of each month as well as commitment to charitable causes
• Time off 25 days a year
• Pension Salary Exchange Scheme with 4% employer contribution and 5% employee contribution
• Discretionary Company Bonus based on company and individual performance
• Life Assurance of 4 times base salary
• Private Medical Insurance which is non-contributory (spouse and dependants included)
• Worldwide Travel Insurance which is non-contributory (spouse and dependants included)