IAM Engineer

<h3>Accountabilities:</h3><ul>
<li>Design, implement, administer, and support Microsoft identity and access management solutions across enterprise environments.</li>
<li>Manage Microsoft Entra ID environments, ensuring secure identity provisioning, authentication, and access management.</li>
<li>Configure, maintain, and optimize Conditional Access policies and authentication controls to strengthen security.</li>
<li>Implement and support Privileged Identity Management (PIM) to manage privileged access and enforce appropriate controls.</li>
<li>Manage enterprise application integrations using SAML and OpenID Connect (OIDC).</li>
<li>Support Single Sign-On (SSO) initiatives across cloud-based and on-premises applications.</li>
<li>Administer Entra Connect synchronization between on-premises Active Directory and Microsoft Entra ID.</li>
<li>Develop, implement, and maintain multi-factor authentication (MFA) strategies and deployments.</li>
<li>Maintain Active Directory environments, including Group Policy, password policies, account lockout policies, and security hardening.</li>
<li>Support Windows Hello for Business implementations and other modern authentication capabilities.</li>
<li>Administer application security controls, including AppLocker and security baselines.</li>
<li>Support public key infrastructure (PKI), certificate infrastructure, and certificate-based authentication solutions.</li>
<li>Investigate and resolve identity-related incidents, authentication failures, access issues, and other technical problems.</li>
<li>Collaborate with cybersecurity, infrastructure, and application teams to deliver identity security initiatives.</li>
<li>Contribute to identity modernization programs and emerging identity security projects, including workforce identity improvements.</li>
<li>Help reduce operational backlogs and support demands by delivering hands-on engineering expertise across core identity services.</li>
<li>Support the adoption of advanced identity security capabilities, including passwordless and phishing-resistant authentication where applicable.</li>
<h2>Requirements:</h2>
<ul>
<li>At least 5 years of experience in Identity and Access Management (IAM).</li>
<li>Strong hands-on experience with Microsoft Entra ID, formerly Azure Active Directory.</li>
<li>Demonstrated experience implementing and managing Conditional Access, MFA, Privileged Identity Management (PIM), SSO integrations, enterprise applications, and app registrations.</li>
<li>Strong Active Directory administration experience, including Group Policy management, account security, and authentication policies.</li>
<li>Experience administering and troubleshooting Entra Connect synchronization between Active Directory and Microsoft Entra ID.</li>
<li>Working knowledge of PKI, digital certificates, certificate management, and certificate-based authentication.</li>
<li>Experience supporting identity security initiatives and enterprise authentication controls.</li>
<li>Excellent troubleshooting, analytical, and problem-solving skills, with the ability to investigate complex identity and access issues.</li>
<li>Ability to work independently, manage competing priorities, and contribute effectively in a fast-paced enterprise environment.</li>
<li>Experience with phishing-resistant authentication solutions is preferred.</li>
<li>Familiarity with passwordless authentication technologies is an advantage.</li>
<li>Experience implementing or supporting Windows Hello for Business is preferred.</li>
<li>Experience supporting workforce identity verification initiatives is beneficial.</li>
<li>Familiarity with healthcare environments or other regulated industries is an advantage.</li>
<li>Knowledge of Zero Trust architecture principles and identity-centered security practices is preferred.</li>
<li>Experience supporting large-scale Microsoft identity transformation and modernization programs is a plus.</li>
<li>Strong collaboration and communication skills, with the ability to work effectively across cybersecurity, infrastructure, and application teams.</li>
<h2>Benefits:</h2>
<ul>
<li>Remote work opportunity within the United States.</li>
<li>Opportunity to work with Microsoft Entra ID, Active Directory, and modern enterprise identity security technologies.</li>
<li>Hands-on involvement in identity modernization, authentication security, and Zero Trust initiatives.</li>
<li>Collaboration with cross-functional cybersecurity, infrastructure, and application teams.</li>
<li>Opportunity to contribute to enterprise-wide security improvements and workforce identity transformation.</li>
</ul>
</ul>
</ul>