IAM Operations Engineer

Location: London (City) - (4 days office/1 remote)
Hours: 11am-7pm (fixed shift)

About the firm
Our client is a leading global law firm with world-class offices in the heart of the City. The firm has recently moved into a brand-new building offering outstanding facilities, including free breakfast, lunch and dinner, a fully equipped on-site gym, and a modern, collaborative working environment.

The opportunity
This is a new role within the EMEA Identity & Access Management team, supporting a global user base and working closely with teams in the US and APAC. The position offers a mix of hands-on BAU operations and project delivery focused on improving automation, access controls and privileged account management across the firm's enterprise environment.

You'll work alongside experienced IAM engineers to maintain and enhance the firm's Microsoft identity platforms, supporting the joiner-mover-leaver life cycle and driving continuous improvement in identity security and governance.

Key responsibilities
Manage and maintain Active Directory, Azure/Entra ID and M365 identity services
Support and enhance the firm's PAM platform (Delinea) - experience with CyberArk or BeyondTrust also welcome
Administer PIM, Conditional Access and MFA policies across the Entra environment
Develop and maintain PowerShell scripts for automation and reporting
Collaborate with global IAM and Infrastructure teams on projects and incident resolution
Ensure access governance, compliance and audit requirements are met across systems
Contribute to roadmap development and platform improvements within the EMEA region

What we're looking for
Strong hands-on experience with Active Directory and Azure/Entra ID administration
Knowledge of PAM solutions such as Delinea, CyberArk or BeyondTrust
Good understanding of M365, Intune and identity security principles
Confident using PowerShell for automation and troubleshooting
Familiarity with PIM, MFA and Conditional Access
Experience working in large, global or professional services environments
Collaborative mindset and a genuine interest in identity security

What's on offer
Annual discretionary bonus
On-site working (4 days office/1 remote)
Free breakfast, lunch and dinner each day
Free on-site gym
Excellent benefits package
Genuine career progression - clear path to Senior Engineer or IAM Architect as the team expands

If you're an experienced IAM or Infrastructure Engineer looking to step into a global role with a strong Microsoft and PAM focus, we'd love to hear from you.

Please apply with your CV