TechOps Analyst - Microsoft Entraid

Responsibilities Access Governance & Process Ownership

• Own the JML process framework. Define standards, controls, escalation paths, and exception handling while the Service Desk executes routine provisioning against those standards.
• Conduct periodic user access reviews with business stakeholders, ensuring access entitlements remain appropriate, justified, and compliant.
• Identify and remediate access control gaps, segregation of duties conflicts, and governance weaknesses across supported platforms.
• Maintain clear, audit-ready documentation and evidence to support internal and external compliance reviews.
• Act as the primary point of escalation for non-standard or high-risk access decisions referred from the Service Desk. Automation & Tooling
• Develop and maintain automation (e.g. PowerShell, Graph API, JQL) to reduce manual effort in access provisioning, reporting, and compliance tasks including tooling consumed by the Service Desk.
• Build and maintain access lifecycle automation where practical, reducing reliance on manual ticket-driven workflows.
• Identify and propose tooling improvements that improve accuracy, auditability, and operational efficiency.
• Maintain version-controlled scripts and automation assets to ensure reliability and supportability. Reporting & Compliance Assurance
• Produce and maintain access, compliance, and platform health reports for governance, audit, and management oversight.
• Support phishing simulations, compliance campaigns, and audit readiness activities.
• Provide evidence and analysis to support internal audit, external review, or regulatory inspection.
• Monitor for anomalous access patterns or entitlement drift and escalate or remediate accordingly. Standards, Documentation & Service Catalogue
• Design and maintain Service Catalogue items and process documentation for access-related services including operating guides consumed by the Service Desk for transactional execution.
• Produce and maintain runbooks, access control standards, and training materials.
• Ensure all documentation is current, clearly written, and operationally fit for purpose. Collaboration & Stakeholder Engagement
• Work closely with the Service Desk to ensure transactional JML processes are well-governed, consistently executed, and escalated appropriately.
• Engage with business stakeholders on access reviews, compliance activities, and platform changes.
• Collaborate with Security, Risk, and Corporate Support Engineering teams on access governance and platform security. Experience and Skills Technical
• Solid hands-on experience with Microsoft 365, Entra ID / Azure AD, Google Workspace, and Atlassian in an enterprise environment.
• A good understanding of RBAC, access governance, entitlement management, and Conditional Access.
• Demonstrable scripting and automation capability (e.g. PowerShell, Microsoft Graph API, JQL).
• Experience designing or owning JML process frameworks in a regulated or audit-sensitive environment, not just executing them.
• Familiarity with enterprise password management, MFA, and privileged access controls.
• Experience with Halo ITSM or equivalent ITSM platforms is desirable. Operational & Governance
• Strong audit, compliance, and evidence-gathering mindset who is able to build and demonstrate a defensible control environment.
• Ability to identify access risk and proactively address control weaknesses.
• Experience supporting or preparing for internal or external audits.
• Comfortable working alongside a separate Service Desk function responsible for transactional delivery. Ways of Working
• Process-driven and analytically minded. Comfortable defining how work is done, not just doing it.
• Strong documentation discipline and structured approach to knowledge management.
• Able to balance security and control requirements with operational pragmatism.
• Self-directed and capable of managing workload with light supervision.