Engineer - Global Technology Operations

TMF Group is a leading provider of administrative services, helping clients invest and operate safely around the world. As a global company with 11,000+ colleagues based in over 125 offices across 87 jurisdictions, we actively seek out people with the talent and potential to flourish at TMF Group, whatever their background, and offer job opportunities to the broadest spectrum of people. Once on board, we nurture and promote talented individuals, ensuring that senior positions are open to all.

We are seeking an experienced Identity and Access Management (IAM) Operations Specialist to manage and support enterprise identity platforms. The ideal candidate will have deep expertise in Windows Active Directory, Microsoft Entra ID (Azure AD), ADFS, SSO, MFA, and related technologies. This role involves ensuring secure, reliable, and efficient identity services across the organization.

Identity Platform Management

• Administer and maintain Windows Active Directory and Microsoft Entra ID environments.
• Manage ADFS, SSO configurations, and MFA policies for secure authentication.

Operational Support

• Provide L2/L3 support for IAM-related incidents and service requests.
• Monitor and troubleshoot identity-related issues, ensuring high availability and performance.

Access Governance

• Implement and enforce identity lifecycle processes (provisioning, de-provisioning, access reviews).
• Ensure compliance with security policies and regulatory requirements.

Integration & Automation

• Support integration of applications with SSO/MFA solutions.
• Develop scripts and automation for routine IAM tasks.

Security & Risk Management

• Apply best practices for identity security, including conditional access and privileged account management.
• Participate in audits and remediation activities.

Documentation & Knowledge Sharing

• Maintain accurate documentation of IAM configurations, processes, and operational procedures.

Technical Expertise

• Strong hands-on experience with Windows Active Directory, Group Policies, and DNS/DHCP.
• Proficiency in Microsoft Entra ID (Azure AD), ADFS, SSO, and MFA.
• Knowledge of Conditional Access, Identity Protection, and Privileged Identity Management.

Experience

• Minimum 7 years in IAM operations or related roles.
• Experience in large-scale enterprise environments.

Tools & Scripting

• Familiarity with PowerShell scripting for automation.
• Understanding of identity federation protocols (SAML, OAuth, OpenID Connect).

Soft Skills

• Strong problem-solving and analytical skills.
• Excellent communication and documentation abilities.

Preferred Qualifications

• Certifications such as Microsoft Certified: Identity and Access Administrator Associate, Azure Administrator, or equivalent.
• Experience with Identity Governance and Administration (IGA) tools.
• Exposure to Zero Trust security models.

Pathways for career development

• Work with colleagues and clients around the world on interesting and challenging work;
• We provide internal career opportunities so you can take your career further within TMF;
• Continuous development is supported through global learning opportunities from the TMF Business Academy.

Making an impact

• You’ll be helping us to make the world a simpler place to do business for our clients;
• Through our corporate social responsibility programme, you’ll also be making a difference in the communities where we work.

A supportive environment

• Strong feedback culture to help build an engaging workplace;
• Our inclusive work environment allows you to work from our offices around the world, as well as from home, helping you find the right work-life balance to perform at your best.

Other Benefits

• Anniversary & Birthday Leave policy
• Be part of One TMF
• Paternity & Adoption leaves
• Salary advance policy
• Work flexibility – Hybrid work model
• Talk about growth opportunities (we invest in talent)
• Well-being initiatives