Job Search

Contract IAM Engineer (Entra ID / Azure AD)

We're looking for an experienced Identity & Access Management Engineer to support an engagement focused on strengthening and simplifying our Microsoft Entra ID (Azure AD) environment.

You'll lead a targeted review across Conditional Access, SSO integrations, guest access, and Key Vault usage - identifying risks, overlaps, and opportunities to streamline configuration. The ideal person can combine hands-on technical depth with the ability to explain Entra ID concepts clearly to non-specialists.

Key Deliverables

Conditional Access: Audit and rationalise CA policies; recommend a simplified, risk-tiered model.SSO Integrations: Review SAML/OIDC/OAuth configurations; standardise onboarding and lifecycle.Guest & External Access: Assess B2B settings and governance of external users.Non-Human Identities & Key Vault: Inventory service principals and app registrations; assess Key Vault access controls and secret rotation.Authentication & MFA: Strengthen MFA coverage and retire weak authentication methods.Monitoring & Governance: Review Entra ID Protection, Sentinel logging, and documentation hygiene.

Requirements

Strong experience with Entra ID / Azure AD, Conditional Access, and SSO.Familiarity with Azure Key Vault, Managed Identities, and PIM.Excellent communication skills - able to present findings and explain risk to non-technical audiences.

This is a hands-on, high-impact contract ideal for a seasoned Entra ID professional who can assess, document, and recommend improvements within a focused window.

GCS is acting as an Employment Agency in relation to this vacancy.

Read less