Archived listing. The details below describe a past opening.
Required Skills & Experience
Bachelor’s degree or equivalent experience 3 years of relevant experience 3+ years of experience in identity and access management, directory services, cybersecurity engineering, or a related technical role Hands-on experience with Microsoft Entra ID and Active Directory in enterprise environments Experience with identity lifecycle management, automated provisioning and deprovisioning, access governance, and role-based access control Knowledge of modern authentication and federation standards, including SAML, OAuth 2.0, OpenID Connect, and SCIM Experience configuring multifactor authentication, Conditional Access, single sign-on, and privileged access controls Experience with PowerShell, Microsoft Graph, REST APIs, or comparable scripting and integration technologies Understanding of least privilege, zero trust, separation of duties, and identity-related security controls
Nice to Have Skills & Experience
Experience integrating IAM platforms with human resources systems and enterprise applications Experience with Microsoft Entra ID Governance, Privileged Identity Management, entitlement management, and access reviews Knowledge of privileged access management platforms and service account governance Experience with identity monitoring, logging, reporting, and security incident investigation Familiarity with IT service management, change control, audit evidence, and compliance frameworks
Identity and security certifications such as:
Microsoft Certified: Identity and Access Administrator Associate (SC-300) Microsoft Certified: Cybersecurity Architect Expert (SC-100) Certified Information Systems Security Professional (CISSP) Certified Information Security Manager (CISM) Identity platform or privileged access management certifications relevant to the enterprise environment
Job Description
We are seeking an experienced IAM Engineer to design, manage, and continuously improve enterprise identity and access management services across cloud and on-premises environments. This role will support identity lifecycle management, authentication, authorization, access governance, directory services, federation, and privileged access.
The ideal candidate will have hands-on experience with Microsoft Entra ID, Active Directory, identity governance, automation, and modern authentication technologies. This individual will partner with cybersecurity, HR, infrastructure, application, audit, and business teams to deliver secure and reliable identity solutions.
Key Responsibilities
Design and maintain identity lifecycle processes for employees, contractors, partners, and service accounts. Automate joiner, mover, and leaver workflows using authoritative identity sources and policy-based provisioning. Configure and support Microsoft Entra ID, Active Directory, hybrid identity synchronization, and directory-integrated applications. Develop role-based and group-based access controls, entitlement structures, and access packages. Build automation using PowerShell, Microsoft Graph, APIs, and workflow tools. Implement and support SSO, MFA, passwordless authentication, Conditional Access, and risk-based access controls. Configure and troubleshoot SAML, OAuth 2.0, OpenID Connect, SCIM, and other identity protocols. Integrate enterprise applications with identity providers and provisioning platforms. Support privileged access controls, just-in-time access, and administrative role governance. Manage access reviews, certification campaigns, separation-of-duties controls, and governance reporting. Monitor identity-related security events and support incident response, audits, and compliance assessments. Troubleshoot complex provisioning, synchronization, authentication, and access issues. Maintain technical documentation, operational procedures, and troubleshooting guides. Evaluate new identity technologies and recommend improvements to security and user experience.