Identity and Access Management Engineer

At Quento, the ICT arm of the Qualco Group, we deliver comprehensive and innovative solutions across AI, Digital Engineering, Cloud, and Cybersecurity, helping businesses accelerate digital transformation. With a presence in Greece, Luxembourg, and Belgium, and backed by the expertise of the Qualco Group, we combine deep technical knowledge with strategic partnerships to support business growth.

At Quento Technologies S.A., we empower our people to innovate and lead in delivering transformative ICT solutions to our clients worldwide. Quento Technologies seeks a highly motivated and experienced Identity and Access Management Engineer.

Responsibilities:

• Administration and monitoring of Identity and Access Management (IAM) System - Microsoft Identity Manager;
• Providing 2nd line support to IAM, Identity Systems and Federation Services;
• Update the technical documentation and operating procedures;
• Troubleshooting IAM and its components;
• Implementing changes according to ICT change management procedures;
• IAM incident management;
• User Access management;
• Other specific duties as assigned by supervisor;
• Ensuring that all activities and duties are carried out in full compliance with regulatory requirements and supporting the continued implementation of the Group Anti-Bribery and Corruption Policy.

Requirements:
• Bachelor's degree;
• Minimum 5 years of IT professional experience;
• Minimum 4 years of experience in similar position;
• Microsoft Entra ID operations;
• Proven hands-on ability to configure and operate Entra ID primarily via Microsoft portals (Entra admin center, Azure portal, M365 admin), including tenant settings, identity objects, and access-related configurations;
• Secure access controls and policy administration;
• Ability to design, implement and maintain identity security controls in Entra ID, especially MFA and Conditional Access (baseline posture, exclusions/break-glass, safe rollout, monitoring), aligned with enterprise security principles (supported by CISSP / cybersecurity architecture background);
• Federation and SSO support (operations + troubleshooting);
• Operational capability to support and troubleshoot SSO/federation integrations using SAML v2, WS-Fed, WS-* and related sign-in patterns, including metadata/certificate handling, claims mapping at a functional level, and coordination with application owners for remediation;
• Identity lifecycle and access management execution;
• Ability to execute and support identity lifecycle processes (JML), access requests/approvals, and user access administration across AD/Entra/MIM-connected services, ensuring consistency with defined IAM processes and minimizing operational risk;
• ITIL/ticket-driven change and incident discipline;
• Ability to operate within ticketing systems and ITIL processes (incident/problem/change/config/release), providing clear implementation steps, risk/impact assessment, rollback approach, post-change validation evidence, and timely stakeholder communication;
• Documentation and operational readiness;
• Strong discipline in maintaining technical documentation and operating procedures (runbooks, SOPs, known errors), including capturing “how-to” steps for GUI-driven configuration, audit evidence requirements, and handover-ready knowledge;
• Relevant certifications (Microsoft and SailPoint preferred; ServiceNow also valuable);
• Knowledge in the area of identity management (including identity lifecycle, identity management processes);
• Knowledge of Microsoft Identity Manager system administration;
• Minimum 1 year of relevant experience in creating and designing Identity Access Management process;
• Knowledge about Microsoft Active Directory, ADLDS, ADFS, LDAP, IDAAS, Entra ID, Azure MFA;
• Knowledge about federation protocols (SAML v2, WS-*, STORK);
• Knowledge about sign-in protocols (WS-FED, SAML, OAUTH);
• Experience with Unique ID set up and implementation in big organizations;
• Experience in ticketing systems and ITIL based change management, configuration management and release management processes;
• Basic knowledge in administering Microsoft Systems;
• Very good knowledge of the English language (B2).

Benefits:
This role is an on - site opportunity Poland.

CV submitted in English.

Your race, gender identity and expression, age ethnicity or disability make no difference in Quento we want to attract, develop, promote, and retain the best people based only on their ability and behavior.

Disclaimer: Quento collects and processes personal data in accordance with the EU General Data Protection Regulation (GDPR). We are bound to use the information provided within your job application for recruitment purposes only and not to share these with any third parties. For more details on the processing of your personal data during the Recruitment procedure, please be informed in the Recruitment Notice, before the submission of your application.