Location: Remote-based, with the potential requirement to work from Sheffield 2-days per week if a new office policy is introduced.
We're partnering with a leading financial services client on a strategic Identity and Access Management transformation programme and are looking for an experienced MFA Engineer to help deliver modern authentication capabilities across a complex enterprise environment.
This is a hands‑on engineering role requiring strong experience across MFA, IAM and authentication technologies , alongside the ability to work effectively with architecture, cybersecurity, application and infrastructure teams.
Key Requirements:
Strong hands‑on experience engineering MFA and SSO within enterprise IAM environments
Deep understanding of modern authentication and federation protocols, particularly OIDC/OAuth2 and SAML
Experience with at least one enterprise Identity Provider platform
Strong understanding of authentication vs authorisation, identity lifecycle and trust boundaries
Working knowledge of PKI, certificates, TLS and key management
Experience operating production IAM services, including monitoring, incident and change management
Strong communication and stakeholder management skills, with the confidence to challenge and influence technical decisions
Ability to work across architecture, cybersecurity, infrastructure and application teams
Desirable:
Entra ID / Azure AD experience
FIDO2/WebAuthn and phishing‑resistant MFA experience
PowerShell and/or Python scripting and API experience
Zero Trust and adaptive/risk‑based authentication knowledge
PAM and privileged authentication experience
Cloud and hybrid identity experience across Azure, AWS or GCP
Experience in financial services or other regulated environments
Relevant IAM, security or Microsoft Identity certifications
This is a key opportunity to play a hands‑on role in a major enterprise IAM transformation, helping shape and deliver the future of authentication across a complex financial services environment.
We use essential cookies to make this site work. With your permission we would also like to use the optional cookies below. Nothing optional is set until you choose, and you can change your mind at any time from "Cookie settings" at the bottom of every page. Cookie policy.
Essential — keep the site working and secure, and remember the choice you make here. Always on.