Crowd Digital Ltd
Active Vacancy
IAM Engineer (ID & Access Engineer)
- Posted on
- 02 November 2026 (Yesterday)
- Employment Type
- Permanent
- Closing Date
- 02 December 2026
- Job Reference
- 225787219
About this role
This is an initial three to six month contract, inside IR35, for an IAM Engineer based in Manchester two days a week, paying £400 to £600 per day depending on experience. Supporting key stakeholders, you will provide specialist identity and access management engineering expertise to support the acceleration of the Cyber Workstreams. Responsibilities include implementing and improving Microsoft Entra ID and Active Directory controls, supporting SSO, MFA and Conditional Access changes, designing RBAC, privileged access and identity governance controls, and improving Joiner, Mover and Leaver lifecycle processes, including automation where appropriate.
Job Description
Identity & Access Management (IAM) Engineer
Length: 3/6 months
SDS: Inside IR35
Rate: £(Apply online only) a day (DOE)
Location: Manchester, 2 days a week
My client is a leader with energy management. They are looking for an IAM Engineer, for an initial 3/6 month contract.
Supporting key stakeholders, you will provide specialist identity and access management engineering expertise to support the acceleration of the Cyber Workstreams.
Key Accountabilities
- To implement and improve Microsoft Entra ID and Active Directory controls so that access is secure, supportable and aligned with business and security requirements.
- Support the delivery and implementation of SSO, MFA and Conditional Access changes for prioritised applications and user groups so that authentication risk is reduced without unnecessary disruption to users.
- Design and implement RBAC, privileged access and identity governance controls so that access is appropriate, traceable and subject to effective review and approval.
- Improvement of the Joiner, Mover and Leaver lifecycle processes, including automation where appropriate, so that access is provisioned, changed and removed accurately and promptly.
- Onboarding of prioritised SaaS applications using federation and automated provisioning, including SAML, OAuth 2.0, OIDC and SCIM, so that applications use consistent and maintainable identity controls.
- Development of PowerShell automation, technical documentation and operational handover materials so that delivered controls can be supported and sustained.
We are looking to shortlist with a view to interview this week.
The ideal candidate will be able to start within 1-2 weeks, but we can wait up to 4 weeks for the right candidate.