Planet is a leading technology company transforming payments by putting customer experience first. We offer integrated solutions that include payment processing, VAT refunds, dynamic currency conversion, and management services for merchants in the Retail and Hospitality sectors worldwide.
In recent years, we have experienced significant growth, expanding our services and global presence.
With strong private equity investors, Advent International and Eurazeo, we have the financial capital and expertise to grow our capabilities and reach through acquisitions.
Our mission is to create a world of connected commerce where payments are simple, secure, and seamless, enabling our partners to deliver exceptional experiences to their customers.
Role Overview:
This role owns Planet’s workforce identity platform across Microsoft Entra ID and on-premises Active Directory. Day to day, you will engineer authentication, access, and governance - Joiner-Mover-Leaver automation, Conditional Access, Privileged Identity Management, and Group Policy - keeping identity secure, compliant, and seamless for a global workforce in a PCI DSS environment.
What you will do:
Identity platform — Engineer and operate Microsoft Entra ID and hybrid on-premises Active Directory, including sync, federation, and domain services.
Joiner-Mover-Leaver — Design and automate the JML lifecycle and access provisioning; ensure timely, accurate, and auditable joiner, mover, and leaver processing.
Access & Conditional Access — Own Conditional Access policies, MFA, and risk-based access to protect users and data.
Privileged access — Administer Privileged Identity Management (PIM) and least-privilege, just-in-time access for administrative roles.
Group Policy & configuration — Maintain and rationalise Group Policy (GPO) and directory configuration across the hybrid estate.
Identity governance — Run access reviews, entitlement management, and certification to meet security and compliance requirements.
Automation — Automate identity operations with PowerShell and the Microsoft Graph API.
Escalation & 3rd line — Act as the highest escalation point for identity and access incidents and problems.
Security & compliance — Apply identity security standards and support audits in line with PCI DSS and Planet policy.
Success Measures
Secure, compliant, and automated identity across Entra ID and Active Directory - JML processed accurately and on time, least-privilege enforced through PIM and Conditional Access, and audits passed.
Who you are:
Deep hands-on experience with Microsoft Entra ID (Azure AD) - authentication, Conditional Access, and identity protection.
Strong on-premises Active Directory and hybrid identity experience (Entra Connect, DNS, sites, trusts).
Expertise in Joiner-Mover-Leaver automation and identity lifecycle / provisioning.
Hands-on Privileged Identity Management (PIM) and privileged access models.
Strong Group Policy (GPO) design and administration.
Identity governance experience - access reviews, entitlement management, and certification.
Strong scripting with PowerShell and the Microsoft Graph API.
Experience in a regulated, ITIL change-controlled environment (PCI DSS an advantage).
Microsoft Identity and Access Administrator (SC-300) certification desirable.
Why Planet
Planet is an equal opportunity employer where diversity is valued, and all employment is decided based on qualifications, merit, and business need.
Come and grow your career in the most exciting, fast paced technology market, with a business that delivers feel-good connected commerce. We would love to hear from you – Apply now.
At Planet, we embrace a hybrid work model, with three days a week in the office.
Reasonable accommodations may be made in order to allow for an individual to perform the essential functions of this role successfully.
Skills Required
- Deep hands-on experience with Microsoft Entra ID (Azure AD) including authentication, Conditional Access, and identity protection.
- Strong on-premises Active Directory and hybrid identity experience (Entra Connect, DNS, sites, trusts).
- Expertise in Joiner-Mover-Leaver automation and identity lifecycle / provisioning.
- Hands-on Privileged Identity Management (PIM) and privileged access models.
- Strong Group Policy (GPO) design and administration.
- Identity governance experience: access reviews, entitlement management, and certification.
- Strong scripting with PowerShell and the Microsoft Graph API.
- Experience in a regulated, ITIL change-controlled environment (PCI DSS is an advantage).
- Microsoft Identity and Access Administrator (SC-300) certification.
Planet (weareplanet.com) Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Planet (weareplanet.com) and has not been reviewed or approved by Planet (weareplanet.com).
-
Fair & Transparent Compensation — Company materials indicate salaries are benchmarked to market throughout the year, suggesting a structured approach to aligning pay with role value. Feedback suggests some roles can negotiate competitive offers at hire.
Planet (weareplanet.com) Insights
What We Do
Planet is a leading global provider of integrated technology and payments solutions for retail and hospitality customers. We create great experiences for the millions of people who use our Payments, Software, and Tax Free solutions every minute of every day. Planet empowers its customers to deliver amazing customer experiences by combining payments and technology in ways that drive greater loyalty, increase revenue and save time. Founded over 35 years ago and with our headquarters in London, today we have more than 2,500 employees located across six continents serving our customers in over 120 markets
