IAM Engineer

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an IAM Engineer based in the United States.

• Design, implement, administer, and support Microsoft identity and access management solutions across enterprise environments.
• Manage Microsoft Entra ID environments, ensuring secure identity provisioning, authentication, and access management.
• Configure, maintain, and optimize Conditional Access policies and authentication controls.
• Implement and support Privileged Identity Management (PIM).
• Manage enterprise application integrations using SAML and OpenID Connect (OIDC).
• Support Single Sign-On (SSO) initiatives across cloud-based and on-premises applications.
• Administer Entra Connect synchronization between on-premises Active Directory and Microsoft Entra ID.
• Develop, implement, and maintain multi-factor authentication (MFA) strategies and deployments.
• Maintain Active Directory environments, including Group Policy, password policies, account lockout policies, and security hardening.
• Support Windows Hello for Business implementations and other modern authentication capabilities.
• Administer application security controls, including AppLocker and security baselines.
• Support public key infrastructure (PKI), certificate infrastructure, and certificate-based authentication solutions.
• Investigate and resolve identity-related incidents, authentication failures, and access issues.
• Collaborate with cybersecurity, infrastructure, and application teams.
• Contribute to identity modernization programs, including passwordless and phishing-resistant authentication.

• At least 5 years of experience in Identity and Access Management (IAM).
• Strong hands-on experience with Microsoft Entra ID (formerly Azure Active Directory).
• Experience implementing and managing Conditional Access, MFA, PIM, SSO integrations, enterprise applications, and app registrations.
• Strong Active Directory administration experience, including Group Policy management, account security, and authentication policies.
• Experience administering and troubleshooting Entra Connect synchronization.
• Working knowledge of PKI, digital certificates, certificate management, and certificate-based authentication.
• Excellent troubleshooting, analytical, and problem-solving skills.
• Experience with phishing-resistant authentication solutions is preferred.
• Familiarity with passwordless authentication technologies is an advantage.
• Experience implementing or supporting Windows Hello for Business is preferred.
• Knowledge of Zero Trust architecture principles is preferred.

• Remote work opportunity within the United States.
• Opportunity to work with Microsoft Entra ID, Active Directory, and modern enterprise identity security technologies.
• Hands-on involvement in identity modernization, authentication security, and Zero Trust initiatives.
• Collaboration with cross-functional cybersecurity, infrastructure, and application teams.