Identity Operation Analyst/Engineer - 6 months - On Site in Wokingham - Inside IR35

Role Overview

An experienced Identity Operations Analyst or Engineer to provide day-to-day operational support of enterprise identity services.

The position spans Active Directory, Microsoft Entra ID, PKI, Application Registrations, and SSO services, with a focus on identity lifecycle management, authentication support, certificate management, and incident resolution.

The role operates within a fast-paced IAM operations team supporting critical identity infrastructure.

Key Responsibilities

• Administer Active Directory including user, group, and computer account management, provisioning and deprovisioning, Group Policy support, and Domain Controller health monitoring.
• Administer Microsoft Entra ID across hybrid environments, troubleshooting MFA, SSPR, Conditional Access policies, sign-in logs, and Entra Connect synchronisation issues.
• Create, manage, and maintain Application Registrations and Enterprise Applications, configuring SSO integrations using SAML, OAuth 2.0, and OpenID Connect, and managing service principals and application permissions.
• Perform PKI and certificate lifecycle management including issuance, renewal, revocation, and expiry monitoring, supporting Microsoft Certificate Services and certificate-based authentication.
• Provide operational support within defined SLA and KPI targets, maintaining runbooks, participating in change and access review activities, and ensuring compliance with security and audit requirements.

Top 5 Skills

• Active Directory & Entra ID administration - Hands-on experience administering both on-premises Active Directory and Microsoft Entra ID (Azure AD) in hybrid enterprise environments, including Entra Connect and Cloud Sync.
• Authentication & SSO technologies - Solid working knowledge of MFA, Conditional Access, SSPR, SAML, OAuth 2.0, and OpenID Connect, with experience configuring and troubleshooting SSO integrations.
• PKI & certificate management - Practical experience managing enterprise PKI and certificate lifecycle activities, including Microsoft Certificate Services and certificate-based authentication support.
• Application registration & enterprise apps - Experience managing Application Registrations, Enterprise Applications, service principals, and application permissions within Microsoft Entra ID.
• PowerShell & ITSM tools - Basic to intermediate PowerShell Scripting for identity automation, with experience using ServiceNow or equivalent ITSM platforms; Microsoft certifications such as SC-300, AZ-900, or SC-900 are preferred.