IAM Engineer (Entra ID / CyberArk / Okta)

10+ years of experience in infrastructure engineering with a focus on identity and access management Proven expertise in Azure Entra ID and Active Directory Hands on experience with CyberArk (CPM, Vault, PSM, PVWA) Experience in regulated industries (energy, financial, compliance) Deep understanding of: Conditional Access Policies Privileged Identity Management (PIM) Application Registrations and MS Graph API permissions Multifactor Authentication (MFA), Self-Service Password Reset (SSPR), Windows Hello for Business (WHfB) Azure user/group management, Intune policies, mobile device management, and endpoint security Experience in an enterprise level organization, this specific environment has over 5,000 users PowerShell scripting skills for automation and scheduled tasks Preferred Qualifications Subject matter expertise in Okta: Identity federation, SSO, SAML, OAuth, OIDC Role-based access control (RBAC) and least privilege principles Application integration and platform configuration Troubleshooting and supporting Okta-based IAM solutions Experience with backup and recovery tools: Rubrik, Cohesity, Metallic (Commvault) Familiarity with Intune Autopilot and policy management Insight Global is assisting a client in identifying a Systems Engineer to lead identity and access management initiatives across a global enterprise. This role is ideal for someone who thrives in hands-on technical environments and can manage multiple projects while supporting daily operations. The engineer will join a team of 13 other engineers, work closely with other technical teams, project managers, and security stakeholders to ensure secure and efficient access across cloud and on-prem systems. Key Responsibilities Lead the design and implementation of identity solutions using Azure Entra ID Manage Conditional Access Policies, Privileged Identity Management (PIM), and role assignments across management groups, subscriptions, and resources Administer app registrations, enterprise applications, service principals, and managed identities with a focus on least-privilege access and MS Graph API permissions Oversee user and group management, endpoint security, and mobile device policies via Intune Maintain and optimize multifactor authentication (MFA), self-service password reset (SSPR), and Windows Hello for Business (WHfB) Automate identity-related tasks using PowerShell scripting and scheduled jobs Stay current on Entra ID features, security trends, and best practices to drive continuous improvement Active Directory Manage a global AD environment with multiple domain controllers and sites supporting 5,000+ users Administer DNS, GPOs, OU structures, and user object configurations Implement Microsoft Tiering, IAM, and PAM models to enforce secure access Maintain domain integrity through FSMO role management and disaster recovery planning Delegate permissions across OU structures and streamline access controls Automate AD tasks using PowerShell for operational efficiency Okta Serve as a subject matter expert on Okta platform capabilities and IAM concepts including SSO, SAML, OAuth, OIDC, MFA, and RBAC Design and configure Okta solutions aligned with enterprise architecture and security requirements Support application integrations and troubleshoot identity-related issues across cloud and on-prem environments Collaborate with architects and stakeholders to refine IAM strategies and ensure secure access provisioning #J-18808-Ljbffr Insight Global