Hands-on IAM consultant responsible for auditing existing identity estates, designing Microsoft Entra ID target architectures, executing phased migrations, configuring hybrid sync, implementing MFA/Conditional Access/passwordless, migrating SSO integrations, enabling identity governance (PIM, access packages, reviews), monitoring/sign-in logs during cutover, and documenting runbooks for operations handover.
About Us
Colibri Digital is a specialist consultancy delivering advanced Data, AI and Cloud solutions for clients across financial services, healthcare, government and enterprise technology sectors.
We help organisations build intelligent, scalable and production-grade data platforms that drive measurable business outcomes. We work closely with our clients to move beyond experimentation and into real-world AI and data transformation delivery. Our Consultants operate as trusted advisors and technical leaders within client environments, combining deep technical expertise with strong stakeholder engagement and delivery capability.
The Role
We're looking for a hands-on IAM Consultant/Developer to join Colibri Digital on client engagement, supporting a major Microsoft Entra ID implementation.
We're looking for a hands-on IAM Consultant/Developer to join Colibri Digital on client engagement, supporting a major Microsoft Entra ID implementation.
This is a hands-on delivery role requiring someone who can combine IAM architecture and design with practical implementation experience. You’ll play a key role in delivering the migration to Microsoft Entra ID, working across discovery, target state design, migration execution, security and handover.
This is not a steady-state IAM administration role. We're looking for someone who has previously delivered complex identity migration/implementation projects and is comfortable operating within a fast-paced client consulting environment.
What You'll Be Doing
- Discovery & design — audit the existing identity estate (on-prem AD, and/or third-party IdP such as Okta or Ping) and design the target-state architecture in Microsoft Entra ID.
- Migration execution — plan and run the cutover, including phased/staged migration approaches to minimise disruption to live services.
- Hybrid identity — configure and manage synchronization between on-prem and cloud using Microsoft Entra Connect or Entra Cloud Sync during the transition period.
- Authentication & security — implement MFA, Conditional Access policies, and passwordless sign-in aligned to Zero Trust principles.
- Application integration — migrate or re-establish SSO for enterprise applications using SAML, OAuth 2.0, and OIDC.
- Identity governance — stand up Privileged Identity Management (PIM), Entitlement Management (access packages), and Access Reviews as part of the target state.
- Cutover support & troubleshooting — monitor sign-in/audit logs and identity protection signals during and after migration to catch issues early.
- Documentation & handover — leave the operations team with clear runbooks and a clean handover once migration is complete.
What We're Looking For
Essential:
- Proven experience delivering a migration onto Microsoft Entra ID (formerly Azure AD) — from on-prem AD DS or from a third-party IdP (Okta, Ping, ForgeRock, etc.).
- Demonstrable Experience owning migrations of large user bases (500k+)
- Strong working knowledge of Conditional Access, Zero Trust security models, and modern authentication protocols (SAML 2.0, OAuth 2.0, OIDC).
- Experience with DNS, TLS certificates and Load Balancers.
- Confident PowerShell scripting for identity lifecycle automation, ideally via the Microsoft Graph PowerShell SDK.
- Comfortable working independently and communicating migration risk/status to non-technical stakeholders.
Desirable:
- KQL for log analysis in Microsoft Sentinel or Azure Monitor.
- Experience with Entra ID B2B/B2C.
- Background with an alternative IAM platform (ForgeRock, Ping, Okta) — genuinely useful for migration work, since you understand what you're migrating from, not just what you're migrating to.
- Experience with API Gateway, API Management platforms
Certifications (nice to have, not mandatory):
- SC-300 (Identity and Access Administrator Associate)
- SC-100 (Cybersecurity Architect Expert)
- SC-500 (Cloud and AI Security Engineer Associate)
- CISSP
About
We are passionate about helping businesses navigate the rapidly changing and complex world of emerging technologies. We create well-structured, secure, scalable solutions at speed to provide the foundation for groundbreaking change.
Nasstar Belfast, Northern Ireland Office
Belfast, United Kingdom
Similar Jobs
Artificial Intelligence • Cloud • HR Tech • Information Technology • Productivity • Software • Automation
Build and deploy production-grade LLM applications spanning backend services, data orchestration, vector databases, and front-end interfaces. Work directly with strategic customers in embedded, field-based engagements; integrate legacy systems, iterate in agile sprints, and deliver scalable AI solutions. Create reusable SDKs, libraries, prompts, scaffolds, and documentation while influencing platform strategy, developer experience, and product roadmaps.
Top Skills:
AirflowAmazon SagemakerAngularSparkAWSAzureAzure Machine LearningCi/CdContainersGoogle Cloud PlatformGraphQLInfrastructure As CodeJavaKubeflowLangchainLimeLoraMlflowNode.jsPandasPeftPrefectPythonReactRestSemantic KernelShapSQLTorchserveTritonVector DatabasesVertex AiVllmWeights & Biases
Blockchain • eCommerce • Fintech • Payments • Software • Financial Services • Cryptocurrency
Manage the full sales cycle for SMB and mid-market UK merchants, from prospecting through close. Build customer relationships, exceed sales targets, develop pipeline strategies, and sell Square’s commerce and financial services solutions. Collaborate with Product, Marketing, onboarding, and other cross-functional teams to address customer needs and improve sales performance.
Top Skills:
Salesforce
Events • Food • Travel • Hospitality • Hotels & Resorts
Supports remote and onsite deployment of Hilton’s Property Engagement Platform across hotels. Responsibilities include troubleshooting, technical guidance, database configuration, hardware and interface setup, PMS data migration, testing, training, and hotel operations support. Collaborates with managers and internal and external support teams, assists with migration projects, and helps train new team members. This fixed-term contract runs through December 2027 and requires travel up to 80%.
Top Skills:
Central Reservation Systems (Crs)Database SystemsHardware InterfacesProperty Engagement Platform (Pep)Property Management Systems (Pms)
What you need to know about the Belfast Tech Scene
If asked to name the birthplace of the RMS Titanic, you might not say Belfast. Similarly, if asked to name Europe's leading destination for foreign direct investment in new software development, Belfast might not come to mind. Yet, both are true. The city has emerged as a tech powerhouse, recently ranked among the best in the U.K. for tech careers — especially for software developers. It also leads the U.K. with the highest percentage of software development jobs advertised.
