Junior Specialist: Identity & Access Management (Azure / Entra ID) & Security

About the role

homechoice, a leading South African homeware retailer, is seeking a security‑minded, detail‑oriented Specialist to join its IT Infrastructure team. The role focuses on Identity & Access Management and security within the Microsoft Azure / Entra ID environment and offers strong growth opportunities across on‑premises AD, Microsoft 365, Intune and server infrastructure.

Key responsibilities

• Administer identity and access in Microsoft Entra ID (Azure AD): user and group lifecycle, role assignments, entitlement and access‑package management.
• Grant, review and revoke access in line with approved requests, applying least‑privilege and Zero Trust principles.
• Support Conditional Access policies, Multi‑Factor Authentication, authentication methods and Privileged Identity Management workflows.
• Assist with identity governance activities such as access reviews, certification campaigns and segregation‑of‑duties controls.
• Monitor and respond to identity‑related security alerts, report incidents and help improve the security posture (e.g., Microsoft Secure Score).
• Maintain accurate records, support audit and compliance activities, and handle personal information in line with POPIA.

Required profile

• Matric / Grade 12 qualification.
• 3–5 years of IT experience with hands‑on exposure to identity and access administration, preferably in Microsoft Entra ID / Azure AD.
• Solid understanding of access fundamentals such as least privilege, role‑based access, approvals and MFA.
• Familiarity with Active Directory and Microsoft 365.
• Careful, accurate and security‑mindful approach to handling access and sensitive data.
• Good communication and collaboration skills.
• Right to work in South Africa and willingness to undergo pre‑employment vetting.

Required skills

• Microsoft Entra ID (Azure AD) identity and access administration.
• Active Directory (on‑premises) user and group management.
• Microsoft 365 administration.
• Azure Conditional Access and Multi‑Factor Authentication.
• Privileged Identity Management (PIM) concepts.
• Identity governance and access‑review processes.
• Microsoft Secure Score and basic security monitoring.
• Halo (or similar) ITSM tool usage.