Identity and Access Management Consultant

We are seeking an experienced Identity and Access Management Consultant to join our team in Romania.

As a digitalization pioneer in the mobility and manufacturing industries, MHP transfers its expertise to a wide range of industries and is a premium partner for thought leaders on their way to a Better Tomorrow.

The successful candidate will be responsible for designing, implementing, and maintaining Identity and Access Management (IAM) solutions across complex hybrid environments, including Microsoft Entra ID and Active Directory.

Key responsibilities:

• Define, govern, and continuously improve IAM policies, standards, role models, and access control frameworks to ensure compliance with security requirements.
• Manage and optimize authentication and authorization platforms inside EntraID.
• Lead cloud identity transformation initiatives, supporting the migration from hybrid and on-premises identities to cloud-only identity architectures.
• Administer and troubleshoot multi-forest Active Directory environments and multi-tenant Microsoft Entra ID infrastructures.
• Assess, design, and improve privileged access management and administrative tiering models.
• Collaborate with security, infrastructure, and application teams to implement secure identity integrations.
• Monitor the health, performance, and security of identity platforms.
• Develop and maintain automation scripts and operational tooling to streamline IAM processes.
• Investigate and resolve complex identity-related incidents and access issues.
• Support security audits, risk assessments, and compliance initiatives.

Requirements:

• Strong knowledge of Identity and Access Management (IAM) concepts, processes, and best practices.
• Experience with Identity Governance and Administration (IGA), Role-Based Access Control (RBAC), and Joiner-Mover-Leaver processes.
• Understanding of authentication, authorization, federation, and single sign-on (SSO) technologies.
• Advanced administration and troubleshooting of Microsoft Entra ID.
• Advanced administration of Active Directory Domain Services (AD DS).
• Experience with hybrid identity architectures and Entra Connect synchronization.
• Knowledge of MFA, SAML, OAuth 2.0, OpenID Connect, and Kerberos.
• Understanding of cybersecurity principles related to identity security.
• Knowledge of cryptographic concepts, certificates, PKI, encryption, and key management.
• Familiarity with Zero Trust and least-privilege access principles.
• Experience with privileged access controls and secure identity design.
• Strong PowerShell scripting and automation skills.
• Experience creating and maintaining operational dashboards and reporting solutions.
• Ability to analyse trends, security events, and identity-related operational metrics.

Benefits:

• Competitive salary
• 27 vacation days
• Flexible working hours
• Opportunities for career growth and professional development