Senior Identity Engineer

Responsibilities

• Deliver identity-related projects from design through implementation and operational handover, including passwordless authentication, identity governance, and legacy technology retirement.
• Act as a subject matter expert for one or more core identity platforms, including Microsoft Entra ID, Saviynt, and Active Directory, configuring, troubleshooting, and operating these platforms directly, not just advising on them.
• Integrate enterprise applications with Microsoft Entra ID and Saviynt using standards such as SAML, OIDC, OAuth, and SCIM.
• Configure and optimise Conditional Access, authentication, and MFA policies to balance security, usability, and business requirements.
• Contribute to Sophos' Non-Human Identity (NHI) strategy, including service accounts, machine identities, secrets management, workload identities, and emerging AI agent identities.
• Analyse, troubleshoot, and resolve complex identity and authentication issues across cloud and on-premises environments.
• Stay current with developments in identity security, identity governance, privileged access management, and emerging industry standards.
• Work using Agile methodologies.
• Participate in the Identity team's out-of-hours support rota.

Languages