Identity & Access Management Engineer

Arrow Electronics•Denver, NE

1d•Hybrid

About The Position

Arrow Electronics is a global provider of products, services, and solutions to industrial and commercial users of electronic components and enterprise computing solutions. Arrow Electronics guides innovation forward for over 220,000 leading technology manufacturers and service providers. With 2025 sales of $30.9 billion, Arrow develops technology solutions that improve business and daily life. The company maintains 228 locations worldwide with over 85 countries served. A Fortune 154 company with 21,500 employees worldwide, Arrow brings technology solutions to a breadth of markets, including telecommunications, information systems, transportation, medical, industrial, and consumer electronics. Arrow provides specialized services and expertise across the entire product lifecycle. Arrow does this by connecting customers to the right technology at the right place, time, and price. Arrow provides extraordinary value to customers and suppliers - the best technology companies in the world - and connects them through the company's industry-leading services. This role will perform work covered by International Traffic in Arms Regulations. Viable candidates for this position must be eligible for an export license or be a U.S. Person (which includes but is not limited to U.S. citizens or nationals, lawful permanent residents, refugees, and asylees)

Requirements

+5 years of working experience with at least 5 of the following technologies: Strong working knowledge of at least 5 of the following technologies: AzureAD, on-prem AD (active directory), Windows Servers, EntraID, GCCH, Intune, Identity, Privilege identity, Delinea Products (Secret Server, Cloud Suite), Veza, ServiceNow, PKI (Public and Private Key Infrastructure), ADCS, Certificate Authorities, HSM (Hardware Security modules), Group Policy, Scripting (PowerShell, etc), AD Domain Controllers.

Nice To Haves

Azure Certifications
Experience with identity (IAM, identity Access Management)
Privileged Identity Management

Responsibilities

Hybrid Identity Architecture: Manage and synchronize identity objects across on-premises and cloud environments to ensure a seamless, unified user experience and reliable authentication.
Privileged Access Management: Design and administer security solutions for credential vaulting, just-in-time access, and the protection of high-value administrative accounts.
Identity Governance & Visibility: Monitor and analyze access rights and permissions across the enterprise to ensure compliance with "least privilege" standards and reduce the attack surface.
Certificate & Key Management: Oversee the lifecycle of digital certificates and encryption keys, including the management of internal certificate authorities and hardware-based security storage.
System Configuration & Hardening: Standardize security settings and operational policies across server infrastructure and endpoint devices using both legacy and modern management tools.
Modern Authentication Engineering: Implement and troubleshoot secure access workflows, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), and conditional access protocols.
Infrastructure Operations: Provide Tier 3 administration for the core servers and domain controllers that host identity, directory, and authentication services.
Automated Workflow Development: Utilize advanced scripting to automate routine directory tasks, health monitoring, and the lifecycle of identity objects.
Compliance Cloud Administration: Maintain identity and directory integrity within high-security, regulated cloud environments that require strict data residency and sovereignty.
Cross-Platform Integration: Coordinate with service management teams to integrate identity processes with internal ticketing systems for automated, auditable request fulfillment.