IAM Engineer | Brussels | Belgium

Job Location – Brussels, Belgium

Experience (Years): 8+ years

Pay Rate – TBN

Start Date - ASAP

6 Months to 1 year Contract – Renewable

Competencies:

* Cyber Security - IAM Professional Services

* Microsoft Entra Identity Management

Role Description

Must Have Skills;

* Operate Microsoft Entra ID for BaU: manage SSO-enabled enterprise apps, app registrations, and related identity configurations in production.

* Handle incidents/requests through ITSM (ServiceNow/Jira or similar): triage, troubleshoot, resolve, document, and communicate updates to stakeholders.

* Troubleshoot end-to-end authentication flows: SAML and OIDC/OAuth2 sign-in errors, token issues, claims/attributes, redirect URIs, and federation metadata problems.

* Perform SAML certificate renewals and rotation activities: plan/execute changes, coordinate with application owners, validate post-change sign-in, and ensure minimal disruption.

* Rotate OIDC client secrets and/or certificates for app registrations and maintain secure storage/handling procedures and evidence of rotation.

* Monitor Entra ID health and SSO experience using platform logs and dashboards (sign-in logs, audit logs, application logs to identify trends and recurring issues.

* Maintain and follow operational runbooks, SOPs, and knowledge base articles to ensure accurate documentation for common incidents and recurring tasks.

* Support subsequent onboarding of new applications for SSO (primarily SAML/OIDC): gather requirements, configure standard patterns, test with application teams, and hand over to support.

* Apply security best practices during operations (least privilege, break-glass awareness, MFA hygiene, and controlled change execution) aligned to Zero Trust principles.

Good to Have Skills

* Operate Conditional Access policies and authentication methods from an operations lens: policy impact assessment, troubleshooting user impact, and controlled changes following CAB/change processes.

* Experience supporting provisioning and lifecycle integrations (SCIM, inbound/outbound provisioning, group-based assignment) and troubleshooting related failures.

* Hands-on exposure to monitoring/alerting integrations (Microsoft Sentinel, Log Analytics/KQL, Azure Monitor) for identity signals and automated triage.

* Basic automation/scripting to reduce toil: PowerShell and Microsoft Graph (or REST) for reporting, bulk operations, and repeatable runbook steps.

* Experience operating directory sync (Entra Connect / Cloud Sync) from a monitoring and incident-response perspective (health checks, error triage, and escalation).

* Contribute to service improvements: problem management (RCA), trend analysis, and proposing preventative controls for recurring incidents.

* Collaborate effectively in ITIL/ITSM and Agile/Scrum ways of working; participate in on-call/shift rota if required.

Languages:

* Fluent English required

* French and/or Dutch is an added advantage