Systems Engineer - Identity & Access Management (IAM) @ SPHERE Technology Solutions | Forgepoint Capital Job Board

About this role

Configure, maintain, and troubleshoot Active Directory, Microsoft Entra ID, LDAP, authentication services, service accounts, certificates, DNS, and related Windows or Linux components. Deploy and support SPHEREboard. Install and configure application, database, and scan-server components; enable connectors; validate services and access; establish schedules; and support operational handoff. Integrate enterprise data sources. Connect directories, servers, databases, PAM platforms, HR sources, and other systems using native connectors, SQL, PowerShell, REST APIs, and structured data formats. Automate repeatable work. Build and maintain PowerShell-based automation for data collection, transformation, validation, monitoring, and operational support. Work confidently with data. Develop and troubleshoot SQL queries, views, stored procedures, and data mappings; reconcile source inventories and validate completeness and accuracy. Troubleshoot end to end. Diagnose issues across identity, operating systems, networks, permissions, certificates, application services, databases, connectors, and source data. Build trusted customer relationships. Demonstrate strong customer-facing skills by partnering with clients to understand business needs, translate technical concepts into clear communications, and deliver timely resolution of system administration requests. Operationalize deployments. Create runbooks, configuration records, test evidence, support procedures, and training materials that enable reliable customer ownership. Apply secure engineering practices. Use least privilege, controlled change, secure credential handling, logging, validation, and clear escalation paths throughout implementation and support. Improve the product and practice. Partner with Engineering, Product, Support, and Services to identify defects, close documentation gaps, improve deployment patterns, and share field learning. Requirements: 3–5+ years of hands-on experience in systems administration, systems engineering, infrastructure engineering, IAM engineering, or a closely related role. Strong administration and troubleshooting experience with Windows Server and Active Directory; working knowledge of Linux/Unix administration. Practical understanding of DNS, TCP/IP, firewalls, ports, proxies, certificates, service accounts, permissions, scheduled services, and remote connectivity. Proficiency with PowerShell for administration and automation. Working SQL skills, including joins, filtering, data validation, and troubleshooting; ability to grow into stored procedures, views, indexing, and performance analysis. Experience supporting production applications or infrastructure and diagnosing multi-system issues from symptoms through root cause. Familiarity with identity and authentication concepts such as directory services, group membership, role-based access, SSO, MFA, SAML, OAuth/OIDC, or Kerberos. Demonstrated customer-facing experience; able to build rapport, listen carefully, explain technical findings, manage expectations, and remain professional under pressure. A security-minded approach to privileged access, credentials, change control, data handling, and operational reliability. Preferred Experience: Microsoft Entra ID, hybrid identity, Group Policy, federation, or enterprise SSO administration. Microsoft SQL Server administration and advanced SQL development, including stored procedures, views, indexing, and query optimization. IAM, IGA, or PAM platforms such as SailPoint, Okta, CyberArk, or comparable technologies. Cloud platforms and identity services in Azure, AWS, or Google Cloud. REST APIs, JSON, XML, Python, Bash, Git, or infrastructure-as-code practices. Experience deploying enterprise software or delivering technical solutions in customer environments. Relevant Microsoft, Linux, cloud, security, or identity certifications. Core Capabilities: Technical Systems thinking and disciplined troubleshooting Identity and directory fundamentals Automation and data fluency Secure, supportable solution design Delivery Friendly, responsive customer partnership Clear communication and expectation management Ownership from discovery through handoff Practical documentation and knowledge transfer What Success Looks Like: Deployments and integrations are delivered securely, accurately, and with clear acceptance evidence. Identity, infrastructure, connector, and data issues are diagnosed methodically and resolved with minimal escalation. Automations and technical solutions are reliable, maintainable, documented, and appropriate for production use. Customers trust the engineer’s technical judgment, approachable style, clear communication, follow-through, and ownership. Field experience becomes reusable documentation, stronger deployment standards, and actionable product feedback. Why Join Us: Apply broad systems-engineering skills to identity security while building deep SPHEREboard expertise and helping large organizations reduce access risk. J oin a high-growth company shaping the future of identity security. Be part of a collaborative culture that values innovation, transparency, and teamwork. Work in a dynamic environment alongside talented colleagues, customers, and industry partners. Enjoy a competitive compensation and benefits package with opportunities for professional growth. About Sphere: SPHERE is the global leader in Identity Hygiene. We are dedicated to reshaping modern identity programs by embedding this foundational fabric, enabling organizations to quickly reduce risks. We work through an identity lens that protects an organization’s accounts, data, and infrastructure. Our solutions deliver immediate time-to-value by leveraging automation to discover, remediate and secure identities, now and forever. Driven by our core values of passion, empathy, and authenticity, our vision drives us to continually innovate, helping our clients to sleep better knowing their attack surface is drastically reduced, thwarting the plans of bad actors every single day. To find out more about SPHERE and our solutions, please visit www.sphereco.com SPHERE is an equal-opportunity employer. Applicants will be evaluated without regard to race, color, religion, sex, national origin, disability, veteran status, and other legally protected characteristics. ","datePosted":"2026-08-14T10:23:41.768Z","validThrough":"2026-11-19","employmentType":[],"hiringOrganization":{"@type":"Organization","name":"SPHERE Technology Solutions","description":"SPHERE is the global leader in Identity Hygiene. We are dedicated to reshaping modern identity programs by embedding this foundational fabric, enabling organizations to quickly reduce risks. Our expertise lies in leveraging automation to deliver immediate time-to-value, providing an identity lens that protects an organization’s accounts, data, and infrastructure.\n\nDriven by our core values of passion, empathy, and transparency, our vision drives us to continually innovate, helping our clients to sleep better knowing their attack surface is drastically reduced, thwarting the plans of bad actors every single day. We’re ready to help you address your identity hygiene and security challenges.

What this role is, and what else it is called

Employers in London advertise this kind of work as Systems Engineer, Infrastructure Engineer, Cloud Engineer and Cloud Architect too, so it is worth searching more than one wording. It is a mid-level Cloud & IT Infrastructure role in London, advertised as hybrid, splitting time between home and the office.

About hiring at Forgepointcap

Forgepointcap has 8 other live technology roles on its careers page, across Cloud & IT Infrastructure, Software Engineering and Technology Architecture. Of those, 78% are advertised as fully remote and 22% as hybrid. Where Forgepointcap states a salary, the median advertised ceiling is £98,400 across 7 roles. Elsewhere in its adverts Forgepointcap asks for Machine Learning, Generative AI, Java, Kubernetes and Docker. See all Forgepointcap roles, salaries and stack.

How this role compares to the market

1,970 live UK roles list Python right now, from 583 employers. The median advertised salary is £80,000; 30% are advertised as remote. Browse Python roles.

1,459 live UK roles list AWS right now, from 503 employers. The median advertised salary is £80,000; 28% are advertised as remote. Browse AWS roles.

London has 4,331 live IT vacancies across 1,366 employers, with a median advertised salary of £70,000. Browse London roles.

Market figures are today's snapshot of live UK roles on employer careers pages; see hiring trends.

Technologies mentioned

Detected on Forgepointcap's careers page. ProdReady Recruitment lists this vacancy as an aggregator and is not the employer; applications go to the employer's own site. More IT jobs in London.