jobapplier

IAM Consultant/Developer - UK, fully remote

Nasstar

We're looking for a hands-on IAM Consultant/Developer to join Colibri Digital on client engagement, supporting a major Microsoft Entra ID implementation.

This is a hands-on delivery role requiring someone who can combine IAM architecture and design with practical implementation experience. You’ll play a key role in delivering the migration to Microsoft Entra ID, working across discovery, target state design, migration execution, security and handover.

This is not a steady-state IAM administration role. We're looking for someone who has previously delivered complex identity migration/implementation projects and is comfortable operating within a fast-paced client consulting environment.

About Nasstar

Colibri Digital is a specialist consultancy delivering advanced Data, AI and Cloud solutions for clients across financial services, healthcare, government and enterprise technology sectors.

We help organisations build intelligent, scalable and production-grade data platforms that drive measurable business outcomes. We work closely with our clients to move beyond experimentation and into real-world AI and data transformation delivery. Our Consultants operate as trusted advisors and technical leaders within client environments, combining deep technical expertise with strong stakeholder engagement and delivery capability.

Responsibilities

  • audit the existing identity estate (on-prem AD, and/or third-party IdP such as Okta or Ping) and design the target-state architecture in Microsoft Entra ID.
  • Migration execution
  • plan and run the cutover, including phased/staged migration approaches to minimise disruption to live services.
  • Hybrid identity
  • configure and manage synchronization between on-prem and cloud using Microsoft Entra Connect or Entra Cloud Sync during the transition period.
  • Authentication & security
  • implement MFA, Conditional Access policies, and passwordless sign-in aligned to Zero Trust principles.
  • Application integration
  • migrate or re-establish SSO for enterprise applications using SAML, OAuth 2.0, and OIDC.
  • Identity governance
  • stand up Privileged Identity Management (PIM), Entitlement Management (access packages), and Access Reviews as part of the target state.
  • Cutover support & troubleshooting
  • monitor sign-in/audit logs and identity protection signals during and after migration to catch issues early.
  • Documentation & handover
  • leave the operations team with clear runbooks and a clean handover once migration is complete.

Requirements

  • Proven experience delivering a migration onto Microsoft Entra ID (formerly Azure AD) — from on-prem AD DS or from a third-party IdP (Okta, Ping, ForgeRock, etc.).
  • Demonstrable Experience owning migrations of large user bases (500k+)
  • Strong working knowledge of Conditional Access, Zero Trust security models, and modern authentication protocols (SAML 2.0, OAuth 2.0, OIDC).
  • Experience with DNS, TLS certificates and Load Balancers.
  • Confident PowerShell scripting for identity lifecycle automation, ideally via the Microsoft Graph PowerShell SDK.
  • Comfortable working independently and communicating migration risk/status to non-technical stakeholders.

Preferred

  • KQL for log analysis in Microsoft Sentinel or Azure Monitor.
  • Experience with Entra ID B2B/B2C.
  • Background with an alternative IAM platform (ForgeRock, Ping, Okta) — genuinely useful for migration work, since you understand what you're migrating from, not just what you're migrating to.
  • Experience with API Gateway, API Management platforms
  • Certifications (nice to have, not mandatory): SC-300 (Identity and Access Administrator Associate)
  • SC-100 (Cybersecurity Architect Expert)
  • SC-500 (Cloud and AI Security Engineer Associate)