IAM Administrator (Microsoft Entra)

Location: Lisboa, Portugal; 100% remote

Starting base salary: €60,000 gross per year

Company

hirify.global operates within Gi Group’s professional services and technology recruitment environment.

What you will do

• Own Microsoft identity platforms end to end, including implementation, operations, monitoring, maintenance, and continuous improvement.
• Act as the T3 escalation owner for complex identity incidents, conducting root-cause analysis and delivering durable fixes.
• Implement and operate hybrid identity across on-premises Active Directory and Entra ID.
• Deliver and support enterprise SSO integrations using SAML, OAuth, OIDC, and SCIM, including claims, certificate, and authentication-flow troubleshooting.
• Build and maintain Joiner/Mover/Leaver automation, provisioning, deprovisioning, RBAC, and access administration.
• Create technical documentation, runbooks, troubleshooting guides, and standards, and provide technical direction when required.

Requirements

• 10+ years of hands-on, relevant Identity & Access Management experience in large, complex, multi-site enterprise environments.
• Advanced Active Directory Domain Services experience is mandatory, including authentication, replication, sites and services, trusts, DNS dependencies, Group Policy, and deep troubleshooting.
• Advanced Microsoft Entra ID experience is mandatory, including Enterprise Applications, Conditional Access, MFA, PIM, and operational Access Governance.
• Production experience with hybrid identity is mandatory, covering both on-premises and cloud identity, hybrid design, implementation, and ongoing operations.
• Experience with Entra Connect Sync and/or Cloud Sync, including design, installation, configuration, upgrades, troubleshooting, object conflicts, attribute flows, mismatch issues, and staging or rollback approaches.
• Experience implementing and operating Joiner/Mover/Leaver processes, automated provisioning and deprovisioning, RBAC, and access administration at scale.
• Strong experience with SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, SSO, and enterprise application integrations.
• Strong PowerShell skills and experience with Microsoft Graph API and APIs for identity administration and lifecycle automation.
• The role requires independent ownership of outcomes and complex escalations; it is not a support-only, governance/compliance-focused, or purely high-level security architecture position.

Culture & Benefits

• Engineering and operations role with independent T3-level ownership in a large enterprise environment.
• Work is 100% remote.
• Equal-opportunity, diversity, inclusion, and non-discriminatory recruitment principles.
• Salary transparency under Directive (EU) 2023/970 and recruitment processes compliant with applicable national legislation and GDPR.