Senior Microsoft Identity & Security Engineer

Tarbh Tech is an Irish MSP and security consultancy. We work with law firms, medical device manufacturers, and other enterprise clients on identity, Microsoft 365 modernisation, and security engineering. We are hiring a Senior Microsoft Identity & Security Engineer to lead a multi-year identity programme delivered through one of our long-standing consulting partners.

You will be embedded as the lead identity engineer on a specific consulting engagement delivered through our partner into a major multinational. The end environment is large, complex, and presents the unique identity challenges that come with global scale - tens of thousands of users, a wide application estate, meaningful governance and compliance demands, and federation at volume. The engagement is scoped in 6-month increments and is expected to run 18–24 months. The role is structured as a fixed-term contract tied to this engagement.

• Architect and operate Microsoft Entra ID at enterprise scale - conditional access, identity protection, PIM, app registrations, enterprise apps
• Design and maintain hybrid identity with Active Directory and Entra Connect
• Build and troubleshoot SAML, OIDC, and SCIM federations across a large third-party app estate
• Lead access governance work - lifecycle, access reviews, role modelling
• Write the kind of documentation that outlives you: runbooks, architecture decisions, handover material
• Represent Tarbh Tech professionally in front of senior client stakeholders

• Substantial, hands-on delivery in Entra ID across a complex hybrid enterprise
• Fluent in SAML, OIDC, and federation troubleshooting - you can read a decoded token and spot the problem
• Strong Active Directory foundations - GPO, AD Connect, migration and hybrid patterns
• PowerShell and Microsoft Graph to a working level
• Self-directing: comfortable driving work forward in an MSP context with minimal day-to-day supervision
• Right to work in Ireland, or eligibility for a Critical Skills Employment Permit
• Comfortable with periodic travel - approximately 1 day per month to Dublin and 1 day per month to the UK

• SailPoint IdentityIQ or IdentityNow
• SC-300, SC-100, CISSP, or equivalent
• Prior MSP or consultancy experience
• Large-multinational or regulated-enterprise background

• Ireland-based, mostly remote
• Approximately 1 day per week at our Limerick office (flexible; negotiable for the right candidate)
• Approximately 1 day per month at a client site in Dublin
• Approximately 1 day per month at a client site in the UK
• Travel expenses reimbursed

Competitive salary, employer pension contribution, full equipment provisioning, a genuine training and certification budget, and a small, high-trust team where good engineers are trusted to do the work properly.

We are running this hire directly. We are not engaging recruitment agencies for this role. Unsolicited CVs submitted by agencies will not be reviewed and no fee will be paid for any candidate introduced outside the application link above, regardless of any subsequent engagement.

We also ask candidates to apply through the link above rather than contacting Tarbh Tech staff directly on LinkedIn, email, or by any other channel. Applications outside the formal process cannot be considered and we are not able to reply to them.

Tarbh Tech is an equal opportunities employer. We welcome applications from candidates of all backgrounds and make hiring decisions on the basis of role-relevant evidence against a structured scorecard.