Iam Engineer Jobs

About The Position

Requirements

• 5+ years of experience in Identity and Access Management engineering supporting hybrid and multi-cloud enterprise environments.
• Strong experience administering Microsoft Entra ID, Active Directory, and hybrid identity architectures at enterprise scale.
• Strong knowledge of AWS IAM, Azure identity services, and authentication technologies including SAML, OIDC, OAuth2, and SCIM.
• Strong experience implementing and operating Conditional Access, Identity Protection, MFA, phishing-resistant authentication, and passwordless authentication solutions.
• Experience with Entra Connect, cloud synchronization, and hybrid identity operations.
• Experience with PowerShell, Microsoft Graph API, Python, Terraform, or other automation technologies.
• Experience with PAM platforms such as Delinea, CyberArk, BeyondTrust, or Azure PIM.
• Experience with identity governance and administration (IGA) platforms such as SailPoint, Saviynt, or Okta.
• Strong understanding of Zero Trust Architecture, least privilege, RBAC, and privileged access design principles.
• Proven ability to translate business requirements into secure, scalable, and supportable identity solutions.
• Strong troubleshooting skills across authentication, federation, access governance, and directory services.

Nice To Haves

• Experience supporting large-scale Microsoft Entra ID tenant administration and governance programs.
• Familiarity with NIST 800-63, NIST CSF, CIS Controls, and Zero Trust Maturity Models.
• Experience integrating IAM, PAM, and IGA telemetry into SIEM platforms.
• Experience securing workforce, workload, and machine identities in cloud-native environments.
• Relevant certifications such as: CISSP, CISM, Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Azure Security Engineer Associate, AWS Security Specialty, Okta Certified Professional, SailPoint Certified Engineer
• Candidates should be comfortable with an on-site presence to support collaboration, team leadership, and cross-functional partnership.

Responsibilities

• Design and Operate Workforce Identity Services
• Design, implement, and maintain Microsoft Entra ID and Active Directory services supporting the enterprise workforce.
• Develop and maintain workforce identity architecture standards, authentication policies, and tenant governance controls.
• Manage and secure Entra ID tenant architecture and identity infrastructure.
• Implement and support Conditional Access, MFA, phishing-resistant authentication, passwordless authentication, and Identity Protection capabilities.
• Establish and maintain tenant security posture standards, administrative tiering strategies, and privileged identity controls.
• Design and maintain federation and enterprise SSO integrations using SAML, OIDC, OAuth2, and related identity protocols.
• Support Entra B2B collaboration and external workforce access patterns.
• Define and maintain enterprise application onboarding standards and identity integration requirements.
• Workforce Identity Operations and Administration
• Implement and support SAML/OIDC application integrations across SaaS, cloud, and enterprise platforms.
• Manage group administration, dynamic group lifecycle management, and directory governance processes.
• Administer Entra Connect, cloud synchronization, and hybrid identity platforms.
• Troubleshoot authentication, federation, Conditional Access, synchronization, and access-related issues.
• Govern application registrations, service principals, enterprise applications, and API permissions.
• Manage guest-user onboarding, lifecycle management, access reviews, and external collaboration controls.
• Maintain directory hygiene, tenant monitoring, operational support procedures, and identity health reporting.
• Develop automation solutions using PowerShell, Microsoft Graph API, Terraform, and related identity engineering tools.
• Cross-Training and Operational Resiliency
• Develop broad expertise across both Entra ID and Active Directory platforms.
• Participate in structured cross-training programs to ensure workforce identity services do not depend on a single individual.
• Maintain shared runbooks, architecture documentation, standards, and operational procedures.
• Participate in on-call support and escalation activities for workforce identity services as required.
• Architect and Automate Identity Foundations
• Work with Identity Architects and Identity Automation Engineering to:
• Design and maintain secure-by-default IAM architectures across Entra ID, AWS IAM, and hybrid enterprise systems.
• Develop paved-road templates for access control patterns such as federated access, role assumption, service accounts, and workload identities.
• Automate provisioning and deprovisioning pipelines using identity APIs, SCIM, and workflow orchestration platforms.
• Implement policy-as-code for IAM guardrails including least privilege, Conditional Access, MFA enforcement, and privilege expiration.
• Engineer scalable automation to reduce manual identity operations and improve governance consistency.
• Access Control, Federation, and Governance
• Engineer federated identity solutions for users, applications, partners, and services using SAML, OIDC, OAuth2, and SCIM.
• Manage Conditional Access policies, adaptive authentication, Identity Protection controls, and passwordless authentication strategies.
• Define and enforce least privilege for human and non-human identities across AWS, Azure, SaaS, and enterprise platforms.
• Integrate IAM governance with enterprise GRC systems to ensure traceability, certification, and audit readiness.
• Partner with AppSec and Cloud Engineering teams to secure authentication and authorization boundaries across applications, APIs, and services.
• Define standards for enterprise application onboarding, identity integration, and access governance.
• Support administrative tiering and privileged access separation strategies across the enterprise.
• Lifecycle and Risk Management
• Work with the appropriate teams to:
• Automate joiner, mover, and leaver processes through API-driven workflows and HR system integrations.
• Support periodic access reviews, certifications, and entitlement recertification campaigns.
• Deliver evidence and support for SOC 2, PCI DSS, ISO 27001, cyber insurance, and regulatory audits.
• Develop and maintain dashboards for identity risk indicators, including:
• Automated provisioning rates
• MFA adoption
• Stale and orphaned accounts
• Access review completion
• Failed recertifications
• Access-removal SLA performance
• Prioritize remediation using risk-based approaches and ensure compliance with internal SLAs.
• Detection and Response Integration
• Collaborate with Security Operations to define identity-centric detections, including impossible travel, lateral movement, privilege abuse, and account compromise.
• Correlate identity events with endpoint, cloud, and application telemetry to identify potential threats.
• Assist in incident response activities involving identity-based attacks, credential theft, and privileged access abuse.
• Support forensic investigations through identity and authentication data analysis.

Benefits

• Comprehensive medical insurance
• dental insurance
• vision insurance
• life and disability insurance
• fertility benefits
• wellness resources
• paid sick time
• Generous paid time off and holidays
• Employee Assistance Program (EAP)
• a complimentary Calm app subscription
• Immediate vesting in a 401(k) plan
• Health Savings Account (HSA) and Flexible Spending Account (FSA) options
• commuter benefits
• employee discount programs
• Paid maternity leave and paid paternity leave (including for adoptive parents)
• legal plan options
• pet insurance coverage