Welcome to Haleon. We’re a purpose-driven, world-class consumer company putting everyday health in the hands of millions. In just three years since our launch, we’ve grown, evolved and are now entering an exciting new chapter – one filled with bold ambitions and enormous opportunity.
Our trusted portfolio of brands – including Sensodyne®, Panadol®, Advil®, Voltaren®, Theraflu®, Otrivin®, and Centrum® – lead in resilient and growing categories. What sets us apart is our unique blend of deep human understanding and trusted science.
Now it’s time to fully realise the full potential of our business and our people. We do this through our Win as One strategy. It puts our purpose – to deliver better everyday health with humanity – at the heart of everything we do. It unites us, inspires us, and challenges us to be better every day, driven by our agile, performance-focused culture.
About the role
The Identity Tooling and Entra SME Engineer is a senior technical engineering role responsible for the expert design, implementation, optimisation, and ongoing support of the organisation’s identity tooling solutions with a primary focus on Microsoft Entra ID and related identity platforms. This position provides deep technical expertise to ensure the effective delivery, integration, and BAU operation of identity governance, access management, MFA, SSO, and directory services. The role reports to the Identity Tooling and Entra Product Manager and works closely with architecture and engineering teams to translate solution designs into robust, secure, and maintainable systems
Role Responsibilities
Act as the subject matter expert for the design, build, configuration, integration, and optimisation of identity tooling solutions, with deep expertise in Microsoft Entra ID, Active Directory, and supporting identity technologies.
Lead the technical implementation and deployment of new Entra ID and identity tooling capabilities and enhancements.
Provide expert engineering support for the day-to-day BAU operations, maintenance, troubleshooting, and performance tuning of Entra ID, Active Directory, MFA, SSO, and related identity platforms.
Collaborate with the Identity Tooling and Entra Product Manager, Solution Architects, and delivery teams to ensure solutions are implemented effectively and meet business and security requirements.
Develop and maintain technical standards, configuration baselines, automation scripts, and operational procedures for Entra ID and identity tooling systems.
Lead vulnerability remediation, patching, and security hardening activities for identity tooling platforms.
Support incident response and problem management activities related to identity systems, including root cause analysis and permanent fixes.
Mentor and provide technical guidance to junior engineers and team members on Entra ID and identity tooling technologies.
Monitor system performance, availability, and capacity, and drive continuous improvement and automation initiatives.
Contribute to the evaluation and selection of new tools or enhancements within the identity tooling and Entra domain
12-Month Success Criteria
Successfully implement and deploy key Entra ID and identity tooling enhancements and projects on time and to a high technical standard.
Achieve stable, reliable, and efficient BAU operations for Entra ID, Active Directory, MFA, SSO, and related platforms, meeting or exceeding defined SLAs.
Deliver measurable improvements in system performance, automation levels, and operational efficiency.
Complete vulnerability remediation and security hardening activities, reducing risk exposure in identity tooling environments.
Establish robust technical documentation, runbooks, and automation scripts for core identity tooling processes.
Provide effective technical support and knowledge transfer to the wider engineering and security operations teams.
Demonstrate reduced identity-related operational incidents through proactive engineering improvements.
Why you?
Basic Qualifications:
Bachelor’s degree or equivalent relevant work experience
8 years in IT, with at least 5 years of hands-on engineering experience in identity and access management tooling.
CISSP or CISM (or equivalent)
Preferred Qualifications:
Deep hands-on expertise with Microsoft Entra ID (including Entra ID Connect, Conditional Access, Identity Protection, Privileged Identity Management, and Entitlement Management), Active Directory, MFA, SSO, and federation technologies.
Strong experience in identity lifecycle management, access certification, hybrid identity, and automation.
Proven track record in implementing and supporting complex Entra ID solutions in large-scale, hybrid, or multi-cloud environments.
Experience with scripting and automation (PowerShell, Graph API, Python, etc.).
Knowledge of relevant regulations and standards (e.g., GDPR, NIS Regulations, ISO 27001)
10+ years in IT, with at least 7 years of specialised experience in Microsoft Entra ID, Active Directory, and enterprise identity tooling.
Job Posting End Date
2026-06-30
Haleon are committed to mobilising our purpose in a way that represents the diverse consumers and communities who rely on our brands every day. It guides us in creating an inclusive culture, where different backgrounds and views are valued and respected – all in support of understanding and best serving the needs of our consumers and unleashing the full potential of our people. It’s important to us that Haleon is a place where all our employees feel they truly belong.
During the application process, we may ask you to share some personal information, which is entirely voluntary. This information ensures we meet certain regulatory and reporting obligations and supports the development, refinement, and execution of our inclusion and belonging programmes that are open to all Haleon employees.
The personal information you provide will be kept confidential, used only for legitimate business purposes, and will never be used in making any employment decisions, including hiring decisions.
If you require a reasonable adjustment or accommodation or other assistance to apply for a job at Haleon at any stage of the application process, please let your recruiter know by providing them with a description of specific adjustments you are requesting. We’ll provide all reasonable adjustments to support you throughout the recruitment process and treat all information you provide us in confidence.
The Haleon recruitment team will contact you using a Haleon email account (@haleon.com). If you are not sure whether the email you received is from Haleon, please get in touch.