Senior Identity and Access Management Engineer

About the role

Our client, a leading South African FinTech, is seeking a Group Senior Identity & Access Management Engineer to join the Group Technology team. This role focuses on designing, implementing and enhancing enterprise IAM solutions in a security‑focused environment.

Key responsibilities

• Design, implement, and maintain enterprise IAM solutions.
• Build and manage automated Joiner, Mover, and Leaver (JML) lifecycle processes using Microsoft Entra ID, Sage and Jira.
• Implement Identity Governance, Role‑Based Access Control (RBAC), Single Sign‑On (SSO), Multi‑Factor Authentication (MFA) and Least Privilege principles.
• Configure and support Microsoft Entra ID Governance, including Lifecycle Workflows, Access Reviews and Entitlement Management.
• Develop automation using PowerShell and the Microsoft Graph API.
• Integrate IAM solutions with enterprise applications and cloud platforms.
• Ensure compliance with SOX IT General Controls and relevant security standards.
• Monitor and improve IAM security, governance and access controls.
• Investigate IAM incidents, resolve access issues and maintain technical documentation.
• Collaborate with Security, Infrastructure, Compliance, HR and Application teams to deliver secure identity solutions.

Required profile

• 5–7 years of experience in Identity & Access Management.
• Minimum 2 years designing or architecting IAM solutions.
• Proven experience building identity lifecycle automation.
• Strong hands‑on experience with Microsoft Entra ID and Entra ID Governance.
• Experience with Active Directory, LDAP, SSO, MFA, RBAC and identity lifecycle management.
• Strong scripting skills using PowerShell and Microsoft Graph API.
• Experience with SOX ITGC and security frameworks such as NIST or ISO 27001.
• Bachelor’s degree (or equivalent experience).
• Microsoft SC‑300 (Identity & Access Administrator Associate) certification is essential.

Required skills

• Microsoft Entra ID / Entra ID Governance
• PowerShell scripting
• Microsoft Graph API
• Active Directory
• LDAP
• Single Sign‑On (SSO)
• Multi‑Factor Authentication (MFA)
• Role‑Based Access Control (RBAC)
• Sage and Jira (for JML processes)