IAM Engineer

Job Description

We are seeking an experienced IAM Engineer to design, manage, and continuously improve enterprise identity and access management services across cloud and on-premises environments. This role will support identity lifecycle management, authentication, authorization, access governance, directory services, federation, and privileged access.

The ideal candidate will have hands-on experience with Microsoft Entra ID, Active Directory, identity governance, automation, and modern authentication technologies. This individual will partner with cybersecurity, HR, infrastructure, application, audit, and business teams to deliver secure and reliable identity solutions.

Key Responsibilities Design and maintain identity lifecycle processes for employees, contractors, partners, and service accounts. Automate joiner, mover, and leaver workflows using authoritative identity sources and policy-based provisioning. Configure and support Microsoft Entra ID, Active Directory, hybrid identity synchronization, and directory-integrated applications. Develop role-based and group-based access controls, entitlement structures, and access packages. Build automation using PowerShell, Microsoft Graph, APIs, and workflow tools. Implement and support SSO, MFA, passwordless authentication, Conditional Access, and risk-based access controls. Configure and troubleshoot SAML, OAuth 2.0, OpenID Connect, SCIM, and other identity protocols. Integrate enterprise applications with identity providers and provisioning platforms. Support privileged access controls, just-in-time access, and administrative role governance. Manage access reviews, certification campaigns, separation-of-duties controls, and governance reporting. Monitor identity-related security events and support incident response, audits, and compliance assessments. Troubleshoot complex provisioning, synchronization, authentication, and access issues. Maintain technical documentation, operational procedures, and troubleshooting guides. Evaluate new identity technologies and recommend improvements to security and user experience.

Skills and Requirements

Bachelor's degree or equivalent experience 3 years of relevant experience 3+ years of experience in identity and access management, directory services, cybersecurity engineering, or a related technical role Hands-on experience with Microsoft Entra ID and Active Directory in enterprise environments Experience with identity lifecycle management, automated provisioning and deprovisioning, access governance, and role-based access control Knowledge of modern authentication and federation standards, including SAML, OAuth 2.0, OpenID Connect, and SCIM Experience configuring multifactor authentication, Conditional Access, single sign-on, and privileged access controls Experience with PowerShell, Microsoft Graph, REST APIs, or comparable scripting and integration technologies Understanding of least privilege, zero trust, separation of duties, and identity-related security controls Experience integrating IAM platforms with human resources systems and enterprise applications Experience with Microsoft Entra ID Governance, Privileged Identity Management, entitlement management, and access reviews Knowledge of privileged access management platforms and service account governance Experience with identity monitoring, logging, reporting, and security incident investigation Familiarity with IT service management, change control, audit evidence, and compliance frameworks Identity and security certifications such as: Microsoft Certified: Identity and Access Administrator Associate (SC-300) Microsoft Certified: Cybersecurity Architect Expert (SC-100) Certified Information Systems Security Professional (CISSP) Certified Information Security Manager (CISM) Identity platform or privileged access management certifications relevant to the enterprise environment

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to View email address on click.appcast.io.