Want to know if this job is worth applying to?
województwo mazowieckie, Polska
Hybrid
Planet is a leading technology company transforming payments by putting customer experience first. We offer integrated solutions that include payment processing, VAT refunds, dynamic currency conversion, and management services for merchants in the Retail and Hospitality sectors worldwide.
In recent years, we have experienced significant growth, expanding our services and global presence.
With strong private equity investors, Advent International and Eurazeo, we have the financial capital and expertise to grow our capabilities and reach through acquisitions.
Our mission is to create a world of connected commerce where payments are simple, secure, and seamless, enabling our partners to deliver exceptional experiences to their customers.
Role Overview:
This role owns Planet’s workforce identity platform across Microsoft Entra ID and on-premises Active Directory. Day to day, you will engineer authentication, access, and governance - Joiner-Mover-Leaver automation, Conditional Access, Privileged Identity Management, and Group Policy - keeping identity secure, compliant, and seamless for a global workforce in a PCI DSS environment.
What you will do:
Identity platform — Engineer and operate Microsoft Entra ID and hybrid on-premises Active Directory, including sync, federation, and domain services.
Joiner-Mover-Leaver — Design and automate the JML lifecycle and access provisioning; ensure timely, accurate, and auditable joiner, mover, and leaver processing.
Access & Conditional Access — Own Conditional Access policies, MFA, and risk-based access to protect users and data.
Privileged access — Administer Privileged Identity Management (PIM) and least-privilege, just-in-time access for administrative roles.
Group Policy & configuration — Maintain and rationalise Group Policy (GPO) and directory configuration across the hybrid estate.
Identity governance — Run access reviews, entitlement management, and certification to meet security and compliance requirements.
Automation — Automate identity operations with PowerShell and the Microsoft Graph API.
Escalation & 3rd line — Act as the highest escalation point for identity and access incidents and problems.
Security & compliance — Apply identity security standards and support audits in line with PCI DSS and Planet policy.
Success Measures
Secure, compliant, and automated identity across Entra ID and Active Directory - JML processed accurately and on time, least-privilege enforced through PIM and Conditional Access, and audits passed.
Who you are:
Deep hands-on experience with Microsoft Entra ID (Azure AD) - authentication, Conditional Access, and identity protection.
Strong on-premises Active Directory and hybrid identity experience (Entra Connect, DNS, sites, trusts).
Expertise in Joiner-Mover-Leaver automation and identity lifecycle / provisioning.
Hands-on Privileged Identity Management (PIM) and privileged access models.
Strong Group Policy (GPO) design and administration.
Identity governance experience - access reviews, entitlement management, and certification.
Strong scripting with PowerShell and the Microsoft Graph API.
Experience in a regulated, ITIL change-controlled environment (PCI DSS an advantage).
Microsoft Identity and Access Administrator (SC-300) certification desirable.
Why Planet
Planet is an equal opportunity employer where diversity is valued, and all employment is decided based on qualifications, merit, and business need.
Come and grow your career in the most exciting, fast paced technology market, with a business that delivers feel-good connected commerce. We would love to hear from you – Apply now.
At Planet, we embrace a hybrid work model, with three days a week in the office.
Reasonable accommodations may be made in order to allow for an individual to perform the essential functions of this role successfully.