Lead Identity Specialist - Microsoft Entra

Lead Identity Specialist - Microsoft Entra

Posted 1 week ago by Vanloq - Workforce Solutions

Negotiable
Inside
Hybrid
Sheffield, England, United Kingdom

Summary: The Lead Identity Specialist – Microsoft Entra is a senior role focused on the enterprise-wide design, deployment, and governance of Microsoft Entra within a financial services context. This position requires deep technical expertise in Identity & Access Management (IAM) and the ability to influence strategy while leading teams. The specialist will act as a subject matter expert and collaborate with various stakeholders to ensure effective IAM adoption and compliance. The role is hybrid, requiring three days on-site in Sheffield.

Key Responsibilities:

  • Lead the enterprise architecture, deployment, and optimisation of Microsoft Entra services including Entra ID, Conditional Access, Identity Protection, PIM, CIEM, and Governance.
  • Provide direction and mentorship to Technical Account Managers, ensuring high-quality delivery aligned with IAM strategy.
  • Act as consulting SME for application, infrastructure, and security teams integrating with Entra ID and related IAM services.
  • Define and execute IAM strategy aligned to Zero Trust principles.
  • Support large-scale IAM adoption, modernisation, and migration from legacy identity platforms.
  • Drive proactive use of Microsoft Defender for Identity to enhance threat detection and identity-based risk management.
  • Partner with security leadership to ensure compliance with audit, regulatory, and governance requirements.
  • Serve as enterprise escalation point for identity-related issues and lead RCA for critical incidents.
  • Establish IAM standards, policies, and best practices across Entra and multi-cloud environments (AWS IAM, GCP IAM).
  • Collaborate with Microsoft engineering/product teams to provide roadmap input and stay ahead of platform developments.
  • Mentor Level 3 engineers, developing capability across the IAM function.
  • Liaise with infrastructure, O365, mobile, and SOC teams to optimise Entra security posture and configurations.

Key Skills:

  • Expert-level knowledge of Microsoft Entra, including conditional access, governance, PIM, CIEM, and Identity Protection.
  • Strong hybrid identity experience across on-prem Active Directory, AD FS, and Entra Connect.
  • Hands-on experience with Microsoft Defender for Identity and integration into broader security ecosystems.
  • Deep understanding of authentication standards such as SAML, OAuth, OpenID Connect, Kerberos, and LDAP.
  • Familiarity with AWS IAM and GCP IAM in multi-cloud IAM strategies.
  • Proven ability to translate complex technical capabilities into business-driven IAM strategies.
  • Demonstrated leadership experience managing technical teams (TAMs, senior engineers).
  • Strong stakeholder engagement, consulting expertise, and cross-functional communication skills.

Salary (Rate): undetermined

City: Sheffield

Country: United Kingdom

Working Arrangements: hybrid

IR35 Status: inside IR35

Seniority Level: Senior

Industry: Financial Services

Detailed Description From Employer:

Job Title: Lead Identity Specialist – Microsoft Entra

Contract: 6-month initial contract (Inside IR35)

Location: Sheffield – Hybrid (3 days per week on-site)

Industry: Financial Services

About the Role

Our financial services client is seeking an accomplished Lead Identity Specialist to oversee the enterprise-wide design, deployment, and governance of Microsoft Entra. This is a senior, hands-on role requiring deep technical expertise and the ability to influence strategy, lead teams, and drive best-in-class Identity & Access Management (IAM) adoption. You will serve as the organisation’s subject matter expert for Microsoft Entra, Privileged Identity Management (PIM), Cloud Infrastructure Entitlement Management (CIEM), Identity Protection, and Microsoft Defender for Identity, working closely with Application Owners, Security Architects, Technical Account Managers, and cross-functional engineering teams.

Key Responsibilities

  • Lead the enterprise architecture, deployment, and optimisation of Microsoft Entra services including Entra ID, Conditional Access, Identity Protection, PIM, CIEM, and Governance.
  • Provide direction and mentorship to Technical Account Managers, ensuring high-quality delivery aligned with IAM strategy.
  • Act as consulting SME for application, infrastructure, and security teams integrating with Entra ID and related IAM services.
  • Define and execute IAM strategy aligned to Zero Trust principles.
  • Support large-scale IAM adoption, modernisation, and migration from legacy identity platforms.
  • Drive proactive use of Microsoft Defender for Identity to enhance threat detection and identity-based risk management.
  • Partner with security leadership to ensure compliance with audit, regulatory, and governance requirements.
  • Serve as enterprise escalation point for identity-related issues and lead RCA for critical incidents.
  • Establish IAM standards, policies, and best practices across Entra and multi-cloud environments (AWS IAM, GCP IAM).
  • Collaborate with Microsoft engineering/product teams to provide roadmap input and stay ahead of platform developments.
  • Mentor Level 3 engineers, developing capability across the IAM function.
  • Liaise with infrastructure, O365, mobile, and SOC teams to optimise Entra security posture and configurations.

Required Skills & Experience

  • Expert-level knowledge of Microsoft Entra, including conditional access, governance, PIM, CIEM, and Identity Protection.
  • Strong hybrid identity experience across on-prem Active Directory, AD FS, and Entra Connect.
  • Hands-on experience with Microsoft Defender for Identity and integration into broader security ecosystems.
  • Deep understanding of authentication standards such as SAML, OAuth, OpenID Connect, Kerberos, and LDAP.
  • Familiarity with AWS IAM and GCP IAM in multi-cloud IAM strategies.
  • Proven ability to translate complex technical capabilities into business-driven IAM strategies.
  • Demonstrated leadership experience managing technical teams (TAMs, senior engineers).
  • Strong stakeholder engagement, consulting expertise, and cross-functional communication skills.

Preferred Qualifications

  • Microsoft certifications such as SC-100 , SC-300 , AZ-500 , or equivalent.
  • 12+ years’ IAM experience including enterprise consulting and large-scale deployments.
  • Experience modernising IAM platforms and migrating from legacy identity systems.
  • Strong background in presenting IAM strategy and architecture to senior leadership.

If you are a senior identity specialist with exceptional Microsoft Entra expertise and the ability to lead both strategic initiatives and deep technical work, we’d love to hear from you.