MFA Engineer

Salary: £? - ? per year

Requirements

• Strong hands-on experience engineering MFA and SSO within enterprise IAM environments
• Deep understanding of modern authentication and federation protocols, particularly OIDC/OAuth2 and SAML
• Experience with at least one enterprise Identity Provider platform
• Strong understanding of authentication vs authorisation, identity lifecycle, and trust boundaries
• Working knowledge of PKI, certificates, TLS, and key management
• Experience operating production IAM services, including monitoring, incident, and change management
• Strong communication and stakeholder management skills, with the confidence to challenge and influence technical decisions
• Ability to work across architecture, cybersecurity, infrastructure, and application teams
• Entra ID / Azure AD experience
• FIDO2/WebAuthn and phishing-resistant MFA experience
• PowerShell and/or Python scripting and API experience
• Zero Trust and adaptive/risk-based authentication knowledge
• PAM and privileged authentication experience
• Cloud and hybrid identity experience across Azure, AWS, or GCP
• Experience in financial services or other regulated environments
• Relevant IAM, security, or Microsoft Identity certifications

Responsibilities

• Help deliver modern authentication capabilities across a complex enterprise environment
• Work hands-on across MFA, IAM, and authentication technologies
• Partner with architecture, cybersecurity, application, and infrastructure teams
• Support a strategic Identity and Access Management transformation programme
• Help shape and deliver the future of authentication across a complex financial services environment

Technologies

• API
• AWS
• Azure
• Cloud
• GCP
• IAM
• Support
• PowerShell
• Python
• SAML
• Security
• DevOps

More

We are partnering with a leading financial services client on a strategic Identity and Access Management transformation programme. This is a remote-based contract opportunity, inside IR35, with the potential requirement to work from Sheffield two days per week if a new office policy is introduced. We are looking for an experienced MFA Engineer to join a hands-on engineering role and help shape and deliver modern authentication capabilities across a complex enterprise environment.

last updated 36 week of 2026