Identity Consultant

{
  "content_hash": "6d61d88ac8392422d6afe9b0c479a664ab0db44ab06680fcbf67a2fdf3581a9e",
  "source_hash": "54c5cccaeb77a0e6f0bf31bd618445970ad1e30b00cd4319e29bb1f6a8d0313a",
  "last_changed_at": "2026-05-30T05:51:07.431Z",
  "active_status": "active"
}

{
  "language": "en",
  "location": {
    "raw": "London, Greater London, W1F 8GQ, United Kingdom",
    "city": "London",
    "region": "Greater London",
    "country": null,
    "is_remote": false,
    "confidence": 0.8
  },
  "salary_max": null,
  "salary_min": null,
  "inferred_at": "2026-06-06T10:29:35.462Z",
  "launch_scope": {
    "reason": "bamboohr_production_catalog",
    "included": true,
    "location": {
      "raw": "London, Greater London, W1F 8GQ, United Kingdom",
      "city": "London",
      "region": "Greater London",
      "country": null,
      "is_remote": false,
      "confidence": 0.8
    },
    "countries": []
  },
  "remote_policy": "hybrid",
  "salary_period": null,
  "workplace_type": "hybrid",
  "salary_currency": null
}

{}

{
  "list_job": {
    "id": "280",
    "isRemote": null,
    "location": {
      "city": "London",
      "state": "Greater London"
    },
    "atsLocation": {
      "city": null,
      "state": null,
      "country": null,
      "province": null
    },
    "departmentId": "18647",
    "locationType": "2",
    "jobOpeningName": "Identity Consultant",
    "departmentLabel": "Professional Services",
    "employmentStatusLabel": "Full-Time"
  },
  "detail_errors": [],
  "detail_job_opening": {
    "location": {
      "city": "London",
      "state": "Greater London",
      "postalCode": "W1F 8GQ",
      "addressCountry": "United Kingdom"
    },
    "datePosted": "2026-04-20",
    "atsLocation": {
      "city": null,
      "state": null,
      "country": null,
      "countryId": null
    },
    "description": "<p><span style=\"font-weight: bold\">We are Kocho</span></p>\n<p><br></p>\n<p>Kocho recognise that technology on its own does not deliver change and offers technology adoption services alongside excellent technical consulting to enable our clients to achieve their business goals on their journey to Become Greater.  </p>\n<p><br></p>\n<p>Our head office is in the heart of London’s West End and provides a comfortable working environment with flexible collaboration spaces that encourage our people to Become Greater with the aim to Do What’s Right.  </p>\n<p><br></p>\n<p>We now have offices in Cardiff and Cape Town which follow the style of our London space.  </p>\n<p><br></p>\n<p>Kocho is an equal opportunities employer. We make recruitment decisions based on qualifications, skill set and experiences. We consider all suitable candidates regardless of their age, sex, gender reassignment, race, religious beliefs, or lack thereof, marital status, disability or sexual orientation or any other protected characteristic. This is mindset aligns with our company values as we understand that we are Better Together.</p>\n<p><br><br></p>\n<p><span style=\"font-weight: bold\">Job Purpose</span></p>\n<p><br></p>\n<p>The<span style=\"font-weight: bold\"> Identity Consultant</span><span> </span>is a delivery-focused role responsible for designing, building, and integrating Microsoft Entra-based identity solutions, with a primary focus on<span> </span><span style=\"font-weight: bold\">Entra Identity Governance (IGA)</span><span> </span>and modern API-driven provisioning. You will work directly with clients to implement lifecycle automation, governance controls, and system integrations that support secure and scalable identity management across hybrid and cloud environments.</p>\n<p>This hands-on role requires strong technical implementation experience with<span> </span><span style=\"font-weight: bold\">Microsoft Entra Identity Governance</span>,<span> </span><span style=\"font-weight: bold\">Logic Apps</span>, and<span> </span><span style=\"font-weight: bold\">Graph API/SCIM-based provisioning</span>, as well as the ability to translate requirements into working, automated solutions. You will collaborate with clients and internal teams to deliver high-impact identity projects that reduce risk and improve operational efficiency.</p>\n<p><br></p>\n<p><span style=\"text-decoration: underline\"><span style=\"font-weight: bold\">Key Responsibilities</span></span></p>\n<p><br></p>\n<p><span style=\"font-weight: bold\">Microsoft Entra IGA Delivery</span></p>\n<ul>\n<li>Lead the deployment and configuration of<span> </span><span style=\"font-weight: bold\">Microsoft Entra Identity Governance</span><span> </span>components:\n<ul>\n<li><span style=\"font-weight: bold\">Entra ID Provisioning</span><span> </span>API – configure solutions to align with Joiner-Mover-Leaver (JML) requirements.</li>\n<li><span style=\"font-weight: bold\">Lifecycle Workflows</span><span> </span>– automate user onboarding, offboarding, and change processes.</li>\n<li><span style=\"font-weight: bold\">Entitlement Management</span><span> </span>– manage access packages, access policies, and group memberships.</li>\n<li><span style=\"font-weight: bold\">Access Reviews</span><span> </span>– define and schedule reviews across groups, applications, and privileged roles.</li>\n<li><span style=\"font-weight: bold\">Privileged Identity Management (PIM)</span><span> </span>– configure role activation policies and just-in-time access.</li>\n</ul>\n</li>\n<li>Map and model access policies that support business roles and audit requirements.</li>\n</ul>\n<p><br></p>\n<p><span style=\"font-weight: bold\">Provisioning and Integration</span></p>\n<ul>\n<li>Design and implement<span> </span><span style=\"font-weight: bold\">automatic provisioning</span><span> </span>to external systems using:\n<ul>\n<li><span style=\"font-weight: bold\">HR-driven provisioning</span><span> </span>via Workday, SAP, or similar platforms.</li>\n<li><span style=\"font-weight: bold\">Microsoft Graph API</span><span> </span>and<span> </span><span style=\"font-weight: bold\">custom provisioning</span><span> </span>for bespoke or on-prem applications.</li>\n<li><span style=\"font-weight: bold\">SCIM-based connectors</span><span> </span>for SaaS applications.</li>\n</ul>\n</li>\n<li>Develop or configure<span> </span><span style=\"font-weight: bold\">custom identity connectors</span><span> </span>where native options are unavailable.</li>\n<li>Build and maintain identity workflows using<span> </span><span style=\"font-weight: bold\">Logic Apps</span>, Power Automate, and related tools.</li>\n<li>Integrate Entra with other systems such as<span> </span><span style=\"font-weight: bold\">ServiceNow</span>,<span> </span><span style=\"font-weight: bold\">SuccessFactors</span>, and on-prem directories.</li>\n</ul>\n<p><br></p>\n<p><span style=\"font-weight: bold\">Client Delivery</span></p>\n<ul>\n<li>Deliver hands-on identity implementations from design through to testing and go-live.</li>\n<li>Lead client workshops to gather requirements and translate them into practical configurations.</li>\n<li>Troubleshoot provisioning and governance issues in complex hybrid environments.</li>\n<li>Document configuration, runbooks, and operational procedures for transition to BAU support.</li>\n</ul>\n<p><br></p>\n<p><span style=\"font-weight: bold\">Collaboration &amp; Knowledge Sharing</span></p>\n<ul>\n<li>Work collaboratively with fellow consultants, architects, and project managers to deliver end-to-end solutions.</li>\n<li>Mentor team members and support internal capability building in Microsoft Entra IGA.</li>\n<li>Contribute to reusable configuration templates, automation scripts, and service improvement.</li>\n</ul>\n<p><br></p>\n<p><span style=\"text-decoration: underline\"><span style=\"font-weight: bold\">Skills and Experience</span></span></p>\n<p><br></p>\n<p><span style=\"font-weight: bold\">Essential</span></p>\n<ul>\n<li><span style=\"font-weight: bold\">Strong hands-on experience delivering Microsoft Entra Identity Governance</span>:\n<ul>\n<li>Lifecycle Workflows, Entitlement Management, Access Reviews, PIM.</li>\n</ul>\n</li>\n<li>Experience with<span> </span><span style=\"font-weight: bold\">automated provisioning</span><span> </span>to cloud and on-prem systems using:\n<ul>\n<li>Microsoft Entra Provisioning Service (SCIM/Graph API)</li>\n<li>Integration with<span> </span><span style=\"font-weight: bold\">Workday</span>,<span> </span><span style=\"font-weight: bold\">SAP</span>, or custom HRIS platforms.</li>\n</ul>\n</li>\n<li>Proven ability to implement and manage<span> </span><span style=\"font-weight: bold\">custom provisioning connectors</span>.</li>\n<li>Proficiency with<span> </span><span style=\"font-weight: bold\">Azure Logic Apps</span>,<span> </span><span style=\"font-weight: bold\">Power Automate</span>, or equivalent for workflow automation.</li>\n<li>Strong scripting knowledge (e.g. PowerShell, Graph API queries).</li>\n<li>Deep understanding of modern identity protocols and lifecycle patterns (JML).</li>\n<li>Excellent communication and documentation skills in a client-facing environment.</li>\n</ul>\n<p><br></p>\n<p><span style=\"font-weight: bold\">Desirable</span></p>\n<ul>\n<li>Microsoft certifications (SC-300, SC-100, AZ-104).</li>\n<li>Experience integrating Entra with legacy directories or ticketing systems (e.g. ServiceNow).</li>\n<li>Familiarity with CI/CD pipelines or infrastructure-as-code for Azure (Terraform/Bicep).</li>\n<li>Experience with Microsoft Identity Manager (MIM) for legacy transitions.</li>\n</ul>\n<p><br></p>\n<p><span style=\"font-weight: bold\">What Success Looks Like</span></p>\n<ul>\n<li>Delivering high-quality, fully integrated identity solutions using Microsoft Entra.</li>\n<li>Successfully implementing API-driven provisioning with full lifecycle automation.</li>\n<li>Helping clients adopt Entra IGA features to improve auditability, governance, and operational efficiency.</li>\n<li>Acting as a trusted technical consultant and problem solver throughout the delivery lifecycle.</li>\n</ul>\n<p><br></p>",
    "compensation": null,
    "departmentId": "18647",
    "locationType": "2",
    "seekPromoted": false,
    "jobCategoryId": null,
    "jobOpeningName": "Identity Consultant",
    "departmentLabel": "Professional Services",
    "jobOpeningStatus": "Open",
    "minimumExperience": null,
    "jobOpeningShareUrl": "https://kocho.bamboohr.com/careers/280",
    "employmentStatusLabel": "Full-Time"
  }
}