Cloud IAM Engineer

ABOUT THE OPPORTUNITY

We are looking for a Senior Cloud IAM Engineer to design, implement and maintain identity and access management solutions for enterprise and mission-facing services in the international defence and public sector. This role focuses on secure cloud identity architecture, automation, federation and access lifecycle management across Microsoft Entra ID and AWS environments.

WHAT YOU WILL DO

- Design, implement and maintain complex identity and access management architectures.
- Support enterprise and mission-facing services with secure authentication and access models.
- Develop automation solutions for identity lifecycle management, provisioning and deprovisioning.
- Automate access reviews, role assignments and operational identity management workflows.
- Administer high volumes of identity objects, roles, groups and access assignments.
- Manage IAM operations across Microsoft Entra ID and AWS IAM Identity Center.
- Deliver identity provider integrations for web applications, portals and external-facing services.
- Configure secure authentication, federation and multi-factor authentication-enabled access.
- Support scalable identity synchronisation across multiple tenants, directories and domains.
- Collaborate with technical and security stakeholders to ensure reliable and compliant IAM delivery.

WHAT WE ARE LOOKING FOR

- At least 5 years of hands-on experience with Microsoft Entra ID.
- Strong practical experience with AWS IAM and AWS IAM Identity Center.
- Proven experience designing complex IAM architectures for hybrid, multi-tenant or cross-domain environments.
- Experience integrating identity providers with web applications, portals and external-facing services.
- Ability to manage secure and scalable identity lifecycle processes across cloud environments.
- Active SECRET-level security clearance suitable for high-security international environments.
- Professional working proficiency in English.
- Structured, responsible and security-minded approach to delivery.
- Collaborative working style with strong ownership, adaptability and focus on operational quality.

TECHNICAL SKILLS

- Microsoft Entra ID
- AWS IAM
- AWS IAM Identity Center
- Identity governance
- Authentication methods
- Conditional access
- Application integration
- Role-based access control
- Federation
- Multi-factor authentication
- Identity lifecycle management
- Identity synchronisation
- Multi-tenant identity architecture
- Hybrid identity architecture
- Cross-domain identity solutions
- Azure Logic Apps
- Power Automate
- Azure Automation
- Azure Functions
- AWS Lambda
- PowerShell
- Cybersecurity best practices
- ISO/IEC 27001 awareness

NICE TO HAVE

- Experience supporting identity services for mission-facing environments.
- Experience improving IAM operations through automation and orchestration.
- Awareness of quality management or information security governance practices.

COMPENSATION TRANSPARENCY

Base salary range: EUR 19 000 - EUR 25 000 gross/year
Total compensation: up to EUR 33 000/year
The salary range is based on objective and gender-neutral criteria, including required competencies, professional experience, level of responsibility and role requirements. Final compensation will be determined according to the candidate's profile and position requirements.

WHAT WE OFFER

- A culture where each professional is encouraged to take ownership, contribute with impact and build with purpose.
- A collaborative environment based on Honesty, Mutual Support and Agility.
- Continuous learning, training and certification support throughout your journey.
- Confidential mental health support from day one through a dedicated partner.
- Private health insurance from the first day, with optional family extension.
- Practical family support measures, including childcare vouchers.
- Flexibility whenever the role and project context allow it.
- Team moments, shared milestones and leadership presence when it matters most.
- Opportunities to strengthen knowledge in information security, quality management, AI governance and cybersecurity best practices.

EQUAL OPPORTUNITY

Hexa is committed to equal opportunity, inclusion and fair access to professional growth. We value diverse backgrounds, experiences and perspectives, and we align our practices with the principles of the Portuguese Diversity Charter.

HEXA LIFE

At Hexa, we are all Builders. We work with ownership, transparency and mutual support to create strong projects, valuable solutions and trusted professional relationships. You will join a community that learns, adapts and builds together, with quality, responsibility and real impact.