Description

The Principal Microsoft Identity Security Specialist will play a key role within the Global Information and Cyber Security Defence function, leading the organisation’s Microsoft-first identity security strategy. The role is responsible for strengthening the identity security posture through the design, implementation, and optimisation of Microsoft Entra ID, Conditional Access, Identity Protection, Privileged Identity Management, passwordless authentication, and Zero Trust-aligned controls.

The specialist will support the organisation’s transition to phishing-resistant and passwordless authentication, reduce identity-based risk, and ensure secure identity governance across enterprise, hybrid, SaaS, and multi-cloud environments including AWS, GCP, and OCI. They will also support the use of Agentic AI and automation to enhance identity threat detection, investigation, and response.

The Role

• Contribute to the design, implementation, and optimisation of Microsoft Entra ID as the organisation's strategic identity platform.
• Deliver and maintain Zero Trust identity controls, including strong authentication, least privilege, and continuous verification.
• Configure, administer, and enhance Conditional Access, Identity Protection, and risk-based access controls.
• Enable the adoption of phishing-resistant authentication technologies, including FIDO2 passkeys, Windows Hello for Business, hardware-backed credentials, and Certificate-Based Authentication.
• Support Privileged Identity Management (PIM), Just-in-Time (JIT) access, privileged access governance, and administrative access controls.
• Contribute to identity governance initiatives, including access reviews, entitlement management, Joiner-Mover-Leaver processes, and role-based access control models.
• Support the secure integration and management of workforce identities, application identities, service principals, managed identities, and workload identities.
• Assist in the implementation and optimisation of Microsoft Defender for Cloud Apps controls to govern SaaS access, reduce shadow IT, and manage session-level risks.
• Support the detection, investigation, and remediation of identity-based threats, including credential compromise, token theft, privilege escalation, and lateral movement.
• Assist with the integration of identity telemetry and risk signals into Microsoft Sentinel and other SIEM/SOAR platforms.
• Support secure identity integration across AWS, GCP, OCI, and hybrid environments.
• Contribute to automation, operational efficiency, and continuous improvement initiatives through scripting, orchestration, and AI-driven capabilities.
• Assist in developing identity security standards, procedures, and technical documentation.
• Collaborate with security, cloud, infrastructure, and engineering teams to support identity security projects and strategic initiatives.
• Provide subject matter expertise, technical guidance, and stakeholder updates relating to identity security technologies and controls.
• Support the organisation's adoption of Agentic AI and automation capabilities to enhance identity threat detection, investigation, response, and operational effectiveness.