Identity Technical Specialist

Sword is a leading provider of business technology solutions within the Energy, Public and Finance Sectors, driving real transformational change within our clients.  We use proven technology, specialist teams and domain expertise to build solid technical foundations across platforms, data and business applications.  We have a passion for using technology to solve business problems, working in partnership with our clients to help in achieving their goals.

Purpose of Role

• Drive the hands-on technical delivery of a programme of identity change across the estate, taking technical ownership of work end to end
• Consolidate two identity environments, inherited through an acquisition, into a single Microsoft Entra ID tenant and retire the legacy environment
• Build and strengthen company identity capability ahead of a global cloud migration, so that identity is secure, automated and ready for scale
• Work under the direction of the Platform, Cloud & Identity Manager, alongside the in-house identity team and an identity managed service provider

Key Responsibilities

• Plan, sequence and execute identity changes across the estate end to end, coordinating technically with the in-house team, the managed service provider and project teams
• Implement recommendations from a recent IAM assessment, delivering the agreed tactical identity improvements
• Execute the migration of users, groups, applications/SSO, guest (B2B) accounts, devices and dependent services from the legacy identity environment into the target Entra ID tenant
• Prepare and run cut-over and rollback plans, validate outcomes, and safely decommission the legacy identity environment
• Configure and harden Entra ID ahead of cloud migration: Conditional Access, MFA/passwordless, app integration (SAML/OIDC), Entra Connect / Cloud Sync and hybrid Active Directory
• Automate joiner/mover/leaver processes with HR systems and ServiceNow; implement access reviews and role-based access control (RBAC)
• Implement privileged access controls (PIM, admin tiering, break-glass accounts) and the identity prerequisites for cloud platforms (Azure RBAC, managed identities)
• Produce identity technical documentation, configuration standards and runbooks, and provide audit and controls evidence as required
• Transfer knowledge to the in-house identity team and support the managed service provider so the identity capability is sustained after the engagement

Requirements

Essential

• Proven ' hands-on experience in identity and access management, ideally in Microsoft Entra ID environments