The Save the Children Fund, commonly known as Save the Children, is an international non-governmental organization that promotes children's rights, provides relief and helps support children in developing countries

Read more about this company

Senior Officer, Identity & Access Management

Job Type

Full Time

Qualification

BA/BSc/HND , Diploma

Experience

Location

Nairobi

Job Field

ICT / Computer

Principal Accountabilities

• Execute user identity lifecycle activities, including onboarding, offboarding, and access modifications in alignment with SCI standards.
• Provide first-line to mid-level troubleshooting for identity-related issues (authentication failures, MFA prompts, access errors, basic conditional access behaviors).
• Manage identity constructs in Azure AD/Entra ID (security groups, role assignments, MFA settings, user attributes).
• Monitor identity systems for anomalies, risky logins, failed authentications, spam-related alerts, and escalation as required.
• Support Senior IAM Administrator with operational tasks, including MFA rollouts, access reviews, SSO integrations, identity hygiene improvements, and conditional access reviews.
• Contribute to IAM documentation, ensuring SOPs remain accurate and aligned with global team guidelines.
• Assist with testing and implementation of identity and infrastructure changes following SCI change management processes.
• Help coordinate and escalate Microsoft Support cases when required.
• Uphold security, compliance, and governance principles across all identity operations.

Experience and Skills

Essential

• Foundational understanding or basic proficiency in IT support, systems administration, or identity operations.
• Understanding of Active Directory principles (users, groups, OU basics).
• Familiarity with Azure AD/Entra ID and Microsoft 365 administration fundamentals.
• Basic understanding of MFA concepts and conditional access fundamentals.
• Ability to follow procedures, logically troubleshoot issues, and document processes clearly.
• Strong communication skills, customer-focused mindset, and willingness to learn.
• Exposure to SSO concepts and authentication workflows.

Desirable

• Basic PowerShell knowledge for operational support tasks.
• Exposure to cloud IAM platforms (Azure AD, etc.).
• Understanding of ITIL principles (incidents, changes, requests).
• Experience with Intune, Autopilot, conditional access reviews, or device identity concepts.
• Experience working in an automated or cloud native environment.

Desirable

• Basic PowerShell knowledge for operational support tasks.
• Exposure to cloud IAM platforms (Azure AD, etc.).
• Understanding of ITIL principles (incidents, changes, requests).
• Experience with Intune, Autopilot, conditional access reviews, or device identity concepts.
• Experience working in an automated or cloud native environment.

Education and Qualifications

Essential

• Relevant Microsoft training/certification (eg, Azure Fundamentals, Microsoft 365 Fundamentals) or equivalent hands-on exposure.

Desirable

• Progress toward Microsoft Associate certifications (eg, Identity and Access Administrator).
• IT-related diploma, degree, or professional course.

• Execute user identity lifecycle activities, including onboarding, offboarding, and access modifications in alignment with SCI standards.
• Provide first-line to mid-level troubleshooting for identity-related issues (authentication failures, MFA prompts, access errors, basic conditional access behaviors).
• Manage identity constructs in Azure AD/Entra ID (security groups, role assignments, MFA settings, user attributes).
• Monitor identity systems for anomalies, risky logins, failed authentications, spam-related alerts, and escalation as required.
• Support Senior IAM Administrator with operational tasks, including MFA rollouts, access reviews, SSO integrations, identity hygiene improvements, and conditional access reviews.
• Contribute to IAM documentation, ensuring SOPs remain accurate and aligned with global team guidelines.
• Assist with testing and implementation of identity and infrastructure changes following SCI change management processes.
• Help coordinate and escalate Microsoft Support cases when required.
• Uphold security, compliance, and governance principles across all identity operations.

• Foundational understanding or basic proficiency in IT support, systems administration, or identity operations.
• Understanding of Active Directory principles (users, groups, OU basics).
• Familiarity with Azure AD/Entra ID and Microsoft 365 administration fundamentals.
• Basic understanding of MFA concepts and conditional access fundamentals.
• Ability to follow procedures, logically troubleshoot issues, and document processes clearly.
• Strong communication skills, customer-focused mindset, and willingness to learn.
• Exposure to SSO concepts and authentication workflows.
• Basic PowerShell knowledge for operational support tasks.
• Exposure to cloud IAM platforms (Azure AD, etc.).
• Understanding of ITIL principles (incidents, changes, requests).
• Experience with Intune, Autopilot, conditional access reviews, or device identity concepts.
• Experience working in an automated or cloud native environment.

• Relevant Microsoft training/certification (eg, Azure Fundamentals, Microsoft 365 Fundamentals) or equivalent hands-on exposure.
• Progress toward Microsoft Associate certifications (eg, Identity and Access Administrator).
• IT-related diploma, degree, or professional course.