IAM Engineer

Accountabilities:: Design, implement, administer, and support Microsoft identity and access management solutions across enterprise environments. Manage Microsoft Entra ID environments, ensuring secure identity provisioning, authentication, and access management. Configure, maintain, and optimize Conditional Access policies and authentication controls to strengthen security. Implement and support Privileged Identity Management (PIM) to manage privileged access and enforce appropriate controls. Manage enterprise application integrations using SAML and OpenID Connect (OIDC). Support Single Sign-On (SSO) initiatives across cloud-based and on-premises applications. Administer Entra Connect synchronization between on-premises Active Directory and Microsoft Entra ID. Develop, implement, and maintain multi-factor authentication (MFA) strategies and deployments. Maintain Active Directory environments, including Group Policy, password policies, account lockout policies, and security hardening. Support Windows Hello for Business implementations and other modern authentication capabilities. Administer application security controls, including AppLocker and security baselines. Support public key infrastructure (PKI), certificate infrastructure, and certificate-based authentication solutions. Investigate and resolve identity-related incidents, authentication failures, access issues, and other technical problems. Collaborate with cybersecurity, infrastructure, and application teams to deliver identity security initiatives. Contribute to identity modernization programs and emerging identity security projects, including workforce identity improvements. Help reduce operational backlogs and support demands by delivering hands-on engineering expertise across core identity services. Support the adoption of advanced identity security capabilities, including passwordless and phishing-resistant authentication where applicable. Requirements: At least 5 years of experience in Identity and Access Management (IAM). Strong hands-on experience with Microsoft Entra ID, formerly Azure Active Directory. Demonstrated experience implementing and managing Conditional Access, MFA, Privileged Identity Management (PIM), SSO integrations, enterprise applications, and app registrations. Strong Active Directory administration experience, including Group Policy management, account security, and authentication policies. Experience administering and troubleshooting Entra Connect synchronization between Active Directory and Microsoft Entra ID. Working knowledge of PKI, digital certificates, certificate management, and certificate-based authentication. Experience supporting identity security initiatives and enterprise authentication controls. Excellent troubleshooting, analytical, and problem-solving skills, with the ability to investigate complex identity and access issues. Ability to work independently, manage competing priorities, and contribute effectively in a fast-paced enterprise environment. Experience with phishing-resistant authentication solutions is preferred. Familiarity with passwordless authentication technologies is an advantage. Experience implementing or supporting Windows Hello for Business is preferred. Experience supporting workforce identity verification initiatives is beneficial. Familiarity with healthcare environments or other regulated industries is an advantage. Knowledge of Zero Trust architecture principles and identity-centered security practices is preferred. Experience supporting large-scale Microsoft identity transformation and modernization programs is a plus. Strong collaboration and communication skills, with the ability to work effectively across cybersecurity, infrastructure, and application teams. Benefits: Remote work opportunity within the United States. Opportunity to work with Microsoft Entra ID, Active Directory, and modern enterprise identity security technologies. Hands-on involvement in identity modernization, authentication security, and Zero Trust initiatives. Collaboration with cross-functional cybersecurity, infrastructure, and application teams. Opportunity to contribute to enterprise-wide security improvements and workforce identity transformation.