Senior Engineer, Identity and Access Management (Active Directory, Entra ID)

VF Corporation • Greensboro, NC

5d • $120,000 - $150,000

About The Position

The Senior Engineer, Identity and Access Management (IAM) is responsible for operating, supporting, and continuously improving identity and access management services, with a primary focus on Microsoft Active Directory, Entra ID, and AWS IAM. The role supports VF’s security, compliance, and business objectives and partners with Security, Infrastructure, Cloud, Application, Enterprise Architecture, Risk, and Audit teams to deliver reliable identity services across cloud and on-premises environments.

The position provides technical expertise for identity initiatives, contributes to identity priorities and planning, and supports projects that modernize identity capabilities while ensuring secure and efficient access to enterprise systems. It also serves as a general IAM subject matter expert for project teams and business partners across authentication, authorization, federation, identity governance, and privileged access.

The role contributes to Entra ID and AWS identity strategy and modernization; supports identity controls and lifecycle processes for autonomous agents and machine identities; and operates identity services including Active Directory, Group Policy, Entra ID SSO, MFA, Conditional Access, AWS IAM Identity Center, and directory services. It provides day-to-day IAM support, including access requests, troubleshooting, and basic IGA and PAM administration on platforms such as Saviynt.

The Senior Engineer partners with stakeholders to translate requirements into IAM solutions, support cloud migrations and application integrations, automate identity lifecycle processes, and balance security, usability, and compliance. The role also supports governance, access reviews, audits, and risk remediation; shares expertise through documentation and guidance; engages vendors; evaluates emerging technologies; and communicates architecture decisions and project status.

Requirements

• 5+ years of experience in Information Security, with strong experience in IAM.
• Hands-on experience implementing and supporting Microsoft Entra ID and AWS IAM.
• Working knowledge of AWS IAM, IAM Identity Center, and federation between Entra ID and AWS using SAML, OIDC, and SCIM.
• Experience with Entra ID Conditional Access, Privileged Identity Management, and hybrid identity through Entra Connect.
• Strong understanding of IAM concepts including SSO, MFA, federation (SAML/OIDC), PAM, IGA, and directory services, with emphasis on Entra ID and AWS implementations.
• Experience supporting and implementing IAM solutions in AWS and hybrid environments.
• Familiarity with Zero Trust principles and identity-centric security models.
• Experience working with compliance, audit, and access governance requirements.
• Strong communication, collaboration, and stakeholder management skills.
• Bachelor's degree or equivalent combination of education and experience.

Nice To Haves

• Exposure to other IAM platforms such as SailPoint, Saviynt, CyberArk, BeyondTrust, or similar platforms.
• Microsoft Identity and Access Administrator (SC-300) certification or AWS Certified Security Specialty.

Responsibilities

• Contribute to Entra ID and AWS identity priorities aligned with security and business objectives.
• Support delivery of Entra ID and AWS identity initiatives and modernization efforts.
• Partner with technology and business teams to identify and implement identity solutions that improve security and user experience.
• Support adoption of Zero Trust principles and modern authentication standards through Entra ID and AWS controls.
• Support implementation of identity controls for autonomous agents and machine identities in Entra ID and AWS.
• Support provisioning, maintenance, and retirement processes for agent identities using Entra workload identities and AWS IAM roles.
• Implement least-privilege access controls and role-based authorization models in Entra ID and AWS for agent workloads.
• Assist in developing standards for workload identity federation and OAuth/OIDC integrations between Entra ID and AWS.
• Support on-premises Active Directory, Group Policy management, and tiered security architecture.
• Support implementation and operation of Entra ID and AWS IAM solutions, and maintain identity standards for authentication, authorization, and identity lifecycle management.
• Support integration of Entra ID and AWS IAM capabilities across SaaS applications and enterprise systems.
• Support enhancements to Active Directory, Entra ID SSO, MFA, Conditional Access, AWS IAM Identity Center, and directory services.
• Collaborate with Enterprise Architecture and Security teams to align IAM solutions with broader technology standards.
• Provide day-to-day IAM support, including access requests, troubleshooting, and basic IGA and PAM administration across platforms such as Saviynt.
• Gather requirements from business and technology stakeholders and translate them into IAM solutions.
• Support cloud migrations, application integrations with Entra ID, and digital transformation initiatives.
• Identify opportunities to automate identity lifecycle processes in Entra ID and AWS and improve operational efficiency.
• Balance security, usability, and compliance requirements when designing solutions.
• Support IAM governance processes, access reviews, and compliance activities.
• Partner with Security, Risk, and Audit teams to address identity-related findings and risks.
• Monitor Entra ID and AWS IAM controls and recommend improvements to strengthen security posture.
• Assist in maintaining compliance with regulatory and audit requirements.
• Share Entra ID and AWS identity expertise through documentation, design reviews, and informal guidance.
• Engage Microsoft, AWS, and implementation partners on identity topics.
• Evaluate emerging IAM technologies and provide recommendations, with emphasis on Entra ID and AWS identity capabilities.
• Support Entra ID feature adoption, Microsoft Entra licensing reviews, and AWS identity optimization efforts.
• Communicate architecture decisions, project status, and technical recommendations to stakeholders.
• Serve as a general IAM subject matter expert across authentication, authorization, federation, identity governance, and privileged access.

Benefits

• Additional compensation awards may include an annual incentive plan, sales incentive, or commission potential.
• VF offers benefit programs; specific details are provided during the hiring process.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior