{"id":6425,"date":"2026-07-02T11:52:38","date_gmt":"2026-07-02T11:52:38","guid":{"rendered":"https:\/\/www.hexa-group.pt\/jobs\/identity-and-access-management-specialist-senior\/"},"modified":"2026-07-08T07:53:39","modified_gmt":"2026-07-08T07:53:39","slug":"identity-and-access-management-specialist-senior","status":"publish","type":"company_job","link":"https:\/\/www.hexa-group.pt\/pt\/jobs\/identity-and-access-management-specialist-senior\/","title":{"rendered":"Identity and Access Management Specialist | Senior"},"content":{"rendered":"<p>Full Remote de Portugal<\/p>","protected":false},"excerpt":{"rendered":"<p>17067 \u00b7 Full Remote \u00b7 -1 \u00b7 Open<\/p>","protected":false},"featured_media":0,"template":"","meta":{"_acf_changed":false,"boond_id":"6758","boond_reference":"17067","boond_place":"fullremote","boond_place_label":"Full Remote","boond_state":12,"boond_state_label":"Open","boond_start_date":"immediate","boond_closing_date":"2026-07-09","boond_answer_date":"2026-06-29","boond_duration":255,"boond_raw_description":"Full Remote de Portugal","boond_criteria":"ABOUT THE OPPORTUNITY\n\nWe are looking for a Senior Identity and Access Management Specialist to support a remote Proof of Concept focused on multi-factor authentication for internet-facing portals in a defence and public-sector environment. The role involves configuring Entra ID as a central identity provider, testing MFA broker technologies, documenting secure service delivery requirements and supporting security, quality and accreditation activities.\n\nWHAT YOU WILL DO\n\n- Build a non-production Proof of Concept environment using Entra ID as the central identity provider.\n- Configure and test MFA broker integrations across selected application platforms.\n- Define, execute and document test scenarios against agreed success criteria and KPIs.\n- Document current production authentication, MFA, onboarding and user lifecycle configurations.\n- Capture and document current login and logout user journeys.\n- Inventory application interfaces and map user accounts across relevant systems.\n- Configure Entra ID app registrations, MFA registration policies and custom attributes.\n- Configure identity provider attribute mappings and validate attribute flows.\n- Support security logging, monitoring, alerting and systems administration log mapping.\n- Work with security teams on penetration testing preparation and evidence gathering.\n- Work with quality teams to align the test strategy, acceptance criteria and service readiness.\n- Create runbooks, support documentation and service delivery requirements.\n- Coordinate security and accreditation inputs in line with applicable assurance expectations.\n- Create migration plans for each technology provider.\n\nWHAT WE ARE LOOKING FOR\n\n- Minimum of 5 years of experience in identity and access management, authentication or security engineering.\n- Recent hands-on experience configuring Entra ID as an MFA provider for brokered authentication flows.\n- Experience rolling out MFA at enterprise scale, ideally for environments with more than 5,000 users.\n- Strong understanding of securing web applications, APIs and internet-facing authentication journeys.\n- Ability to produce clear, structured and high-quality technical, testing and service documentation.\n- Strong customer relationship skills, including the ability to handle complex and sensitive situations under pressure.\n- Professional working proficiency in English.\n- Ability to work remotely with autonomy, ownership and disciplined delivery.\n- Eligibility to work in a restricted security environment and maintain the required security clearance for the full assignment duration.\n\nTECHNICAL SKILLS\n\n- Microsoft Entra ID\n- Multi-factor authentication\n- SAML\n- OIDC\n- Federated identity management\n- Single Sign-On\n- Okta\n- Keycloak\n- Amazon Cognito\n- SharePoint\n- Moodle\n- Certificate-based MFA\n- Smart cards\n- YubiKeys\n- Passkeys\n- WebAuthn\n- TOTP\n- Push-based MFA applications\n- Microsoft Authenticator\n- Duo\n- Risk-based authentication\n- Adaptive authentication\n- TLS\n- Client certificates\n- Reverse proxies\n- Zero Trust principles\n- Security logging\n- Monitoring and alerting\n- Penetration testing coordination\n- Runbooks\n- Service delivery documentation\n- Security accreditation coordination\n- ISO\/IEC 27001 awareness\n- Cybersecurity best practices\n\nNICE TO HAVE\n\n- Experience aligning identity security implementations with quality management practices.\n- Experience supporting formal security assurance or accreditation activities.\n- Familiarity with large-scale identity migration planning.\n- Awareness of ISO 9001 or ISO\/IEC 42001 practices in technology delivery environments.\n\nCOMPENSATION TRANSPARENCY\n\nBase salary range: EUR 25 000 - EUR 40 000 gross\/year\nTotal compensation: up to EUR 56 000\/year\nThe salary range is based on objective and gender-neutral criteria, including required competencies, professional experience, level of responsibility and role requirements. Final compensation will be determined according to the candidate's profile and position requirements.\n\nEQUAL OPPORTUNITY\n\nHexa is committed to equal opportunity and inclusive hiring. We value different backgrounds, experiences and perspectives, and we align our practices with the principles of the Portuguese Diversity Charter.\n\nHEXA LIFE\n\nAt Hexa, we are all Builders. You will join a community where people are encouraged to contribute, question, improve and create impact with responsibility and trust. We build strong projects, meaningful solutions and lasting professional relationships through honesty, mutual support and agility.","boond_expertise_area":"-1","boond_is_visible":true,"boond_created_at":"2026-06-29T11:30:30+0200","boond_created_ts":1782725430,"boond_updated_at":"2026-07-02T13:08:06+0200","boond_type_of":1,"boond_mode":1,"boond_active_positionings":1,"boond_manager_id":"17497","boond_agency_id":"1","boond_agency_label":"Hexa Consulting","boond_pole_id":"1","job_location":"Full Remote","job_contract":"-1","job_business_unit":"Hexa Consulting","job_seniority":"Senior","job_title_without_seniority":"Identity and Access Management Specialist","job_remote_url":"","job_source":"boond","manatal_hash":"","manatal_status":"","job_last_synced_at":"2026-07-08 07:53:39"},"class_list":["post-6425","company_job","type-company_job","status-publish","hentry"],"blocksy_meta":[],"acf":[],"_links":{"self":[{"href":"https:\/\/www.hexa-group.pt\/pt\/wp-json\/wp\/v2\/company_job\/6425","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hexa-group.pt\/pt\/wp-json\/wp\/v2\/company_job"}],"about":[{"href":"https:\/\/www.hexa-group.pt\/pt\/wp-json\/wp\/v2\/types\/company_job"}],"version-history":[{"count":1,"href":"https:\/\/www.hexa-group.pt\/pt\/wp-json\/wp\/v2\/company_job\/6425\/revisions"}],"predecessor-version":[{"id":6426,"href":"https:\/\/www.hexa-group.pt\/pt\/wp-json\/wp\/v2\/company_job\/6425\/revisions\/6426"}],"wp:attachment":[{"href":"https:\/\/www.hexa-group.pt\/pt\/wp-json\/wp\/v2\/media?parent=6425"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}