Customer: Intergovernmental organization

Start Date: ASAP

Duration: 6 months with possibilities of contract extensions based on performances.

Service Delivery Location: Offshore (UTC+5 to UTC-1)

Background information:

Our client requires Cloud Identity and Access Management consultancy services for architecting, deploying, and supporting identity services on-prem and in the cloud (AWS, MS Azure and GCP). The Identity Management team, which provides both project and ongoing services, is geographically distributed among various locations, mainly in Europe.

Required Profile:

The resource, who shall be reporting to the Cloud identity technical team lead, shall have strong experience in managing identity and access management solution in large operational environments.

Scope of Work:

The resource shall support the Cloud identity team, on projects or ongoing support services, as per arising needs.

• Creating Identity Automation Solutions:
• Use Microsoft C# (including Azure Functions and ASP.NET) to build automation solutions.
• Write scripts using Microsoft PowerShell to improve processes.
• Deployment and Collaboration:
• Work closely with other cloud teams to deploy and maintain cloud identity platforms based on Client’s requirements.
• Collaborate with UNICC technical teams, including Information Security and Development teams.
• Documenting Procedures:
• Prepare technical documentation.
• Document operational procedures.
• Staying Informed:
• Keep up with Azure identity and access management solutions best practices and emerging technologies.
• Evaluate new trends for potential adoption.
• Cost Control and Optimization:
• Assist with cost control and optimization for UNICC clients’ environments.
• Supporting Azure and On-Premises Identity Environments (including, but not limited to):
• Microsoft Entra ID & Entra ID Connect: Ensure secure authentication. o Microsoft Identity Management: Help with identity synchronization and management.
• Microsoft Active Directory Federation Services (AD FS): Support single sign-on and federation.
• Microsoft APP Proxy: Enable secure remote access to on-premises applications.

Required Technical Skills:

• Coding skills (With Microsoft C#).
• Scripting skills (With Microsoft PowerShell).
• Knowledge of Microsoft based identity solutions and M365.
• Deep hands-on experience of Microsoft Azure Identity Services.
• Strong knowledge with user provisioning and self-service; account creation and management; entitlement review and certification; entitlement management; enterprise directory architecture and design; role-based access control; single sign-on; privileged user access management; multifactor authentication.

The resource SHOULD have the following skills and experience:

• Experience in managing MIM services (Microsoft Identity Management).
• Experience in managing ADFS (Microsoft Active Directory Federation Services).

Desirable certifications:

• IDAM certification(s)
• ITIL/ ISO 20000 Service Management

On-call requirements:

• One week per month (rotation is subject to the number of team members)