IAM Engineer at Digital Waffle, United Kingdom, £300-£350 per day

Role: IAM Engineer (Microsoft Entra ID / SSO)

Contract Length: Initial 3 months (Likely Extended)

Location: Fully Remote, UK

Rate: £300-£350 per day (Outside IR35)

We are looking for an experienced IAM Engineer to join on an initial 3-month contract, supporting the management, optimisation and delivery of enterprise identity and access services.

This is a hands-on role focused on Microsoft Entra ID, SSO integrations, authentication technologies and SaaS identity management. You will be responsible for configuring, troubleshooting and improving identity solutions across Microsoft and Google environments, ensuring secure and reliable access across the organisation.

Key Responsibilities

• Administer and support Microsoft Entra ID (Azure AD) including Conditional Access, SAML federation, UPN management and Intune integrations.
• Configure and troubleshoot SSO solutions using SAML 2.0, OIDC and OAuth 2.0, including claims configuration, NameID formats and SP/IdP metadata.
• Manage Google Workspace administration including SAML apps, OAuth applications and directory services.
• Develop PowerShell scripts and utilise Microsoft Graph API for automation, bulk user operations and audit reporting.
• Manage SSL/TLS certificates and DNS configurations including MX, CNAME, TXT, SPF and DKIM records.
• Support SSO integrations with SaaS platforms including Salesforce, Atlassian, GitHub Enterprise, Zoom and HubSpot.
• Manage Azure service principals, application registrations and managed identities.
• Produce technical documentation including runbooks, rollback plans and handover materials.

Essential Experience

• Strong hands-on experience administering Microsoft Entra ID (Azure AD).
• Strong understanding of SAML 2.0, OIDC and OAuth 2.0 authentication protocols.
• Experience managing enterprise SSO integrations and SaaS application access.
• Google Workspace Super Admin experience.
• Strong PowerShell scripting skills and experience with Microsoft Graph API.
• Experience managing certificates, DNS records and Azure identity services.

Desirable Experience

• Experience delivering domain or tenant migration projects.
• Familiarity with tools such as Datadog, Rapid7 InsightIDR, Jamf and Keeper.
• Strong technical documentation skills.