Identity and Access Management Specialist

Meriton•Irving, TX

1d•Hybrid

About The Position

The Identity & Access Management (IAM) Specialist owns day-to-day identity and access operations for several thousand users across multiple Microsoft Entra tenants, Active Directory, Microsoft 365, and connected business applications. The specialist processes access requests; resolves sign-in, multifactor authentication (MFA), single sign-on (SSO), and application access issues; and maintains accurate records and least-privilege access. This early-career role is part of a two-person IAM engineering team. The Senior IAM Engineer provides architecture, design, technical direction, and production approval. Within those approved designs, the specialist configures, integrates, tests, documents, and troubleshoots solutions through completion. The role balances an interrupt-driven request queue with planned integrations, access reviews, automation, migrations, and security improvements. The position is hybrid and requires a candidate local to the Dallas-Fort Worth area who can work from the Shared Services Office in Irving, Texas. The employee works onsite each workday during the first two onboarding weeks, then normally one day per week onsite, with remote work available on other days. Additional onsite attendance may be required for projects, incidents, meetings, or other business needs. There is no formal on-call rotation; planned evening or weekend work may be needed a few times per year for migrations, cutovers, or significant incidents. The work is performed in a corporate office environment, typically at a moderate temperature. Telework, work at home, on the road, or at a satellite location may occur for portions of the workweek depending on project needs and coordination with the direct supervisor or most senior department leader. The role regularly involves using a computer keyboard and telephone, reaching, and lifting or moving up to 25 pounds; standing, walking, and sitting are frequent, and climbing or balancing and stooping, kneeling, crouching, or crawling are occasional. Meriton provides reasonable accommodations for qualified individuals with disabilities unless doing so would result in undue hardship and is an Equal Opportunity Employer.

Requirements

Bachelor's degree in Information Technology, Cybersecurity, Information Systems, or a related field, or equivalent practical experience.
Two or more years of relevant experience in identity and access management, Microsoft 365 or Azure administration, directory services, systems administration, cybersecurity, or advanced technical support; equivalent hands-on experience may be considered in place of a strict year count.
Hands-on experience administering users, groups, access, and authentication in Microsoft Entra ID, Active Directory, or Microsoft 365 in a production environment.
Experience troubleshooting sign-in, MFA, SSO, or application-access problems using logs, audit records, testing, and service-management tickets.
Working knowledge of IAM fundamentals, least privilege, role-based access control, MFA, Conditional Access, and identity lifecycle processes.
Foundational knowledge of SAML or OpenID Connect and ability to configure and test SSO integrations under an approved technical design.
Strong written and verbal communication skills for documenting work, explaining access issues, and coordinating resolution.
Ability to work under privileged-access controls, including a dedicated administrative account, time-bound Privileged Identity Management activation, and no standing privilege.
Ability to complete a background check.
Must be local to the Dallas-Fort Worth area and able to work from the Irving, Texas office as required by the hybrid schedule.

Nice To Haves

Relevant Microsoft identity, Azure, or security certifications, or CompTIA Security+; certifications are preferred but not required.
Experience with PowerShell, Microsoft Graph PowerShell SDK, or REST APIs for reporting and routine administration.
Familiarity with SAML, OAuth 2.0, OpenID Connect, SCIM, Privileged Identity Management administration, access reviews, B2B guest access, and service-account lifecycle practices.
Experience with HR-driven provisioning, identity automation, enterprise applications, app registrations, or certificate and secret lifecycle management.
Experience with an IT service-management platform such as ServiceNow, Jira Service Management, or Freshservice.
Experience in a multi-tenant Microsoft 365 environment or supporting merger, acquisition, divestiture, or tenant-migration work.

Responsibilities

Own daily triage and fulfillment of the IAM request queue, including approved group memberships, Microsoft 365 groups, distribution lists, shared mailboxes, application assignments, and license changes.
Perform ongoing license hygiene, including monthly reclamation of unused Microsoft 365 and third-party licenses, group-based licensing upkeep, and utilization reporting; coordinate allocations, true-ups, and renewals with licensing, procurement, and application owners.
Troubleshoot sign-in, password, MFA, SSO, and application access issues using sign-in logs, audit records, service-management tickets, and documented testing; resolve routine issues and escalate complex or non-standard problems with findings documented.
Execute employee and contractor joiner, mover, and leaver processes, including account provisioning, access changes, account disablement, and timely access removal.
Validate user identity, business need, and required approvals before fulfilling access requests or resetting authentication methods, and maintain accurate records of changes.
Administer identities and approved access across the Meriton hub tenant and operating-company Entra tenants, Active Directory, Microsoft 365, and connected applications.
Maintain approved group memberships, access profiles, application permissions, and time-bound privileged assignments in support of role-based access control and least privilege.
Partner with Human Resources, the service desk, application owners, and business stakeholders to resolve provisioning discrepancies and access issues.
Maintain IAM procedures, knowledge-base articles, ticket records, and operational documentation for review, repeatability, and auditability.
Using designs and production approvals provided by the Senior IAM Engineer, configure, test, document, and troubleshoot SSO and automated provisioning integrations using SAML, OAuth 2.0, OpenID Connect, and SCIM.
Support approved Conditional Access, MFA, authentication-method, passwordless, and Temporary Access Pass changes through configuration, testing, user communication, documentation, and troubleshooting.
Monitor HR-driven provisioning, SCIM connectors, and scheduled automation for failures or attribute mismatches; resolve routine problems and escalate issues requiring architecture or policy changes.
Assist with access reviews, entitlement reporting and remediation, guest-account recertification, stale-account cleanup, service-account governance, and emergency-access account verification.
Use PowerShell, Microsoft Graph tools, and identity-management tools to generate reports, perform authorized updates, and reduce repetitive manual work.
Track expiring certificates and secrets, missing owners, stale applications, and approved consent requests to maintain application and app-registration hygiene.
Collect audit evidence and produce recurring IAM metrics, including stale accounts, MFA coverage, guest accounts, privileged assignments, and license utilization.
Coordinate with Security Operations on identity-related alerts and investigations, including authorized account containment and recovery actions.
Support cross-tenant synchronization, B2B collaboration, tenant consolidations, acquisitions, divestitures, migrations, and access cutovers under senior technical direction.
Monitor Microsoft 365 and Entra change announcements and flag deprecations or feature changes that may affect the environment.
Perform other duties and responsibilities as assigned.