IAM顾问/开发者（Microsoft Entra ID）- 合同角色，英国，完全远程
IAM Consultant/Developer (Microsoft Entra ID) - Contract role, UK, fully remote
关于我们：Colibri Digital 是一家专业咨询公司，为金融服务，医疗保健，政府和企业技术部门的客户提供先进数据，人工智能和云解决方案。我们帮助组织建立智能，可扩展性和生产级数据平台，从而推动可测量商业成果。我们与客户密切合作，超越实验并进入现实世界的人工智能和数据转型交付。我们的顾问在客户环境中担任可信任的顾问和技术领导者，并结合深入的技术专业知识与强大的利益相关者的参与和交付能力。我们正在寻找一个实践 IAM 顾问/开发人员加入 Colibri Digital 在客户参与方面，支持主要的 Microsoft Entra ID 实现。这是一个实践交付角色需要谁能将 IAM 架构和设计与实际实施经验相结合。你将在向 Microsoft EntraID 迁移提供关键作用，通过发现，目标状态设计，迁徙执行，安全性和传递工作。这不是稳定状态的 IAM 管理角色。我们正在寻找以前已经提供复杂的身份迁移/实施项目，并且在快速发展的客户咨询环境中工作很舒服的人。你将做什么 · 发现和设计 审计现有身份遗产 （本地 AD 和/或第三方 IDP 如 Okta 或 ping）并设计微软 Entra ID 中的目标状态架构。· 移民执行 计划并运行切除，包括逐步/阶段迁徙方法以最大限度减少对直播服务的干扰。· 混合身份在转型期内使用微软 Entra Connect 或 Entra Cloud Sync 配置和管理本地与云之间的同步。·验证和安全性 实施 MFA,条件访问政策以及无密码登录符合零信任原则。·应用程序集成 迁移或重新建立企业应用程序的 SSO 使用 SAML,OAuth 2.0和 OIDC. ·身份治理 作为目标状态的一部分设立特权身份管理 (PIM),权利管理 （访问包）和访问评论。· 在迁移期间和之后监测登录/审计日志和身份保护信号，以早期发现问题。·文档及交付 让操作团队拥有清晰的运行簿和干净的机器人
查看英文原文
About Us
Colibri Digital is a specialist consultancy delivering advanced Data, AI and Cloud solutions for clients across financial services, healthcare, government and enterprise technology sectors.We help organisations build intelligent, scalable and production-grade data platforms that drive measurable business outcomes. We work closely with our clients to move beyond experimentation and into real-world AI and data transformation delivery. Our Consultants operate as trusted advisors and technical leaders within client environments, combining deep technical expertise with strong stakeholder engagement and delivery capability.The RoleWe're looking for a hands-on IAM Consultant/Developer to join Colibri Digital on client engagement, supporting a major Microsoft Entra ID implementation. This is a hands-on delivery role requiring someone who can combine IAM architecture and design with practical implementation experience. You’ll play a key role in delivering the migration to Microsoft Entra ID, working across discovery, target state design, migration execution, security and handover. This is not a steady-state IAM administration role. We're looking for someone who has previously delivered complex identity migration/implementation projects and is comfortable operating within a fast-paced client consulting environment.
What You'll Be Doing
- Discovery & design — audit the existing identity estate (on-prem AD, and/or third-party IdP such as Okta or Ping) and design the target-state architecture in Microsoft Entra ID.
- Migration execution — plan and run the cutover, including phased/staged migration approaches to minimise disruption to live services.
- Hybrid identity — configure and manage synchronization between on-prem and cloud using Microsoft Entra Connect or Entra Cloud Sync during the transition period.
- Authentication & security — implement MFA, Conditional Access policies, and passwordless sign-in aligned to Zero Trust principles.
- Application integration — migrate or re-establish SSO for enterprise applications using SAML, OAuth 2.0, and OIDC.
- Identity governance — stand up Privileged Identity Management (PIM), Entitlement Management (access packages), and Access Reviews as part of the target state.
- Cutover support & troubleshooting — monitor sign-in/audit logs and identity protection signals during and after migration to catch issues early.
- Documentation & handover — leave the operations team with clear runbooks and a clean handover once migration is complete.
What We're Looking For
Essential:
- Proven experience delivering a migration onto Microsoft Entra ID (formerly Azure AD) — from on-prem AD DS or from a third-party IdP (Okta, Ping, ForgeRock, etc.).
- Strong working knowledge of Conditional Access, Zero Trust security models, and modern authentication protocols (SAML 2.0, OAuth 2.0, OIDC).
- Confident PowerShell scripting for identity lifecycle automation, ideally via the Microsoft Graph PowerShell SDK.
- Comfortable working independently and communicating migration risk/status to non-technical stakeholders.
Desirable:
- KQL for log analysis in Microsoft Sentinel or Azure Monitor.
- Experience with Entra ID B2B/B2C.
- Background with an alternative IAM platform (ForgeRock, Ping, Okta) — genuinely useful for migration work, since you understand what you're migrating from, not just what you're migrating to.
Certifications (nice to have, not mandatory):
- SC-300 (Identity and Access Administrator Associate)
- SC-100 (Cybersecurity Architect Expert)
- SC-500 (Cloud and AI Security Engineer Associate)
- CISSP
Originally posted on Himalayas