identity Engineer (Entra ID JML)

• Manage end-to-end Joiner, Mover, and Leaver (JML) processes, ensuring timely creation, modification, and removal of user accounts and access rights.
• Administer Microsoft Entra ID, including user lifecycle management, group administration, role assignments, and license management.
• Provision, modify, and revoke access to enterprise applications in accordance with approved access requests and security policies.
• Configure and support identity security controls such as Multi-Factor Authentication (MFA), Conditional Access, and Self-Service Password Reset (SSPR).
• Monitor and troubleshoot identity, authentication, and access-related issues, ensuring minimal disruption to users.
• Support identity governance activities, including access reviews, recertification campaigns, and compliance audits.
• Maintain accurate identity records and ensure adherence to security, regulatory, and company compliance requirements.
• Automate provisioning and access management processes to improve efficiency and reduce manual effort.
• Collaborate with HR, Service Desk, Security, and Infrastructure teams to deliver seamless onboarding, role changes, and offboarding experiences.
• Produce and maintain operational documentation, procedures, knowledge articles, and service reports.

Essential skills/knowledge/experience:

• Strong experience administering Microsoft Entra ID (Azure AD), including user provisioning, group management, role assignments, and licensing.
• Proven experience managing Joiner, Mover, Leaver (JML) processes and identity lifecycle management within an enterprise environment.
• Good understanding of Identity & Access Management (IAM) principles, access governance, and least-privilege security models.
• Hands-on experience with MFA, Conditional Access, Self-Service Password Reset (SSPR), and authentication management.
• Experience supporting identity provisioning, deprovisioning, and user access requests while maintaining compliance and audit requirements.
• Strong troubleshooting, stakeholder communication, and documentation skills with the ability to work across HR, Service Desk, Security, and Infrastructure teams.

skills/knowledge/experience:

• Experience with identity governance and administration tools, including automated provisioning and access certification solutions.
• Knowledge of Microsoft 365 security technologies, including Microsoft Defender, Privileged Identity Management (PIM), and Identity Protection.
• Experience integrating HR systems, ServiceNow, or ITSM platforms with Identity and Access Management processes.
• Familiarity with PowerShell scripting and automation for user provisioning, reporting, and access management tasks.
• Understanding of security, compliance, and audit frameworks such as ISO 27001, GDPR, `and Zero Trust principles.