IAM Architect

Role: Senior Identity & Access Management (IAM) Engineer Location: Remote (onsite as needed) Experience: 10+ Years Client: OpenKyber Rate: $50/hr on C2C Must-Have Skills 5+ years of experience in IAM, Information Security, Directory Services, or related areas Strong hands-on experience with Microsoft Active Directory and Microsoft Entra ID Experience supporting hybrid identity, federation services, synchronization, and modern authentication Hands-on experience with Google Cloud Platform IAM or comparable cloud identity platforms Experience with Privileged Access Management (PAM) and privileged-account controls Identity lifecycle management, provisioning/deprovisioning, RBAC, and access governance Authentication and authorization protocols: SAML, OAuth, OpenID Connect (OIDC), LDAP, and Kerberos Experience supporting HIPAA, SOX, audit, and compliance activities Strong troubleshooting, analytical, communication, and cross-functional collaboration skills Preferred Skills Google Cloud Platform Config Connector (KCC) IAM resources Wiz IAM, Security Command Center, and cloud-security monitoring tools CyberArk, HashiCorp Vault, Delinea, BeyondTrust, or similar PAM solutions Identity Governance and Administration (IGA) platforms Automation/scripting with PowerShell, Python, Terraform, or Infrastructure as Code Certifications: SC-300, Security+, AZ-500, CISSP, CISM, Microsoft Security, or Google Cloud Platform Security Engineer Experience in healthcare, life sciences, financial services, or other regulated industries Key Responsibilities Design, implement, and support IAM solutions across Google Cloud Platform landing zones and hybrid identity environments Administer Microsoft Entra ID and Active Directory, including federation, synchronization, and authentication services Implement IAM standards, security policies, access controls, RBAC, group-based permissions, and privileged-access controls Configure and manage PAM capabilities for administrative and elevated-access scenarios Support Active Directory hardening, identity governance, least privilege, and Zero Trust principles Configure and maintain AD organizational units, GPOs, security groups, and delegated-administration models Troubleshoot authentication, authorization, provisioning, and federation issues across cloud and on-premises environments Perform access reviews and remediate excessive, unused, or inappropriate access Monitor IAM security events, audit logs, and privileged-access activity Support onboarding, offboarding, role changes, emergency terminations, and high-risk access revocation Participate in on-call support, incident response, root-cause analysis, disaster recovery, and business-continuity activities Partner with Security, Infrastructure, Compliance, Audit, and Application teams on IAM requirements and audit readiness Develop runbooks, SOPs, IAM documentation, training materials, and automation initiatives

For applications and inquiries, contact:View email address on us.fitly.work