IAM Engineer

The IAM Engineer will design, implement, and maintain secure identity and access management solutions across enterprise environments. This remote role focuses on Microsoft identity technologies, including Microsoft Entra ID, Active Directory, and modern authentication controls. You will strengthen organizational security by implementing conditional access policies, multi-factor authentication, privileged identity management, and single sign-on capabilities. Working alongside cybersecurity, infrastructure, and application teams, you will troubleshoot identity-related incidents and support critical security initiatives. You will also contribute to identity modernization projects, including passwordless authentication and Zero Trust strategies. This opportunity is ideal for an experienced identity security professional who enjoys hands-on engineering, solving complex technical challenges, and improving enterprise security at scale.

• At least 5 years of experience in Identity and Access Management (IAM).
• Strong hands-on experience with Microsoft Entra ID, formerly Azure Active Directory.
• Demonstrated experience implementing and managing Conditional Access, MFA, Privileged Identity Management (PIM), SSO integrations, enterprise applications, and app registrations.
• Strong Active Directory administration experience, including Group Policy management, account security, and authentication policies.
• Experience administering and troubleshooting Entra Connect synchronization between Active Directory and Microsoft Entra ID.
• Working knowledge of PKI, digital certificates, certificate management, and certificate-based authentication.
• Experience supporting identity security initiatives and enterprise authentication controls.
• Excellent troubleshooting, analytical, and problem-solving skills, with the ability to investigate complex identity and access issues.
• Ability to work independently, manage competing priorities, and contribute effectively in a fast-paced enterprise environment.
• Experience with phishing-resistant authentication solutions is preferred.
• Familiarity with passwordless authentication technologies is an advantage.
• Experience implementing or supporting Windows Hello for Business is preferred.
• Experience supporting workforce identity verification initiatives is beneficial.
• Familiarity with healthcare environments or other regulated industries is an advantage.
• Knowledge of Zero Trust architecture principles and identity-centered security practices is preferred.
• Experience supporting large-scale Microsoft identity transformation and modernization programs is a plus.
• Strong collaboration and communication skills, with the ability to work effectively across cybersecurity, infrastructure, and application teams.