> Markdown version of [/jobs/ext/1320922-identity-access-management-iam-engineer-enterprise-technology-infrastructure](https://www.wearedevelopers.com/jobs/ext/1320922-identity-access-management-iam-engineer-enterprise-technology-infrastructure). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Identity & Access Management (IAM) Engineer - Enterprise Technology Infrastructure - **Company:** Hines Interests Limited Partnership - **Location:** Houston, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Artificial Intelligence, Microsoft Azure, Software as a Service, Program Optimization, Cyber Security, Domainkeys Identified Mail, Domain-Based Message Authentication Reporting and Conformance (DMARC), Multi-Factor Authentication, Identity and Access Management, IT Management, Information Technology Operations, Knowledge Management, Microsoft Security Essentials, Microsoft Visio, OAuth, OpenID, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Zero Trust Network Access, Security Assertion Markup Language (SAML), Single Sign-On, User Environment Management, Workflow Management Systems, Enterprise Software Applications, Microsoft Power Automate, Sender Policy Framework (SPF), AI Platforms, IronPort, Cisco - **Published:** July 17, 2026 - **Apply:** https://www.dice.com/job-detail/62a37bb7-d7d8-4094-9610-3c5ab03edc90 ## About the Role * Bachelor's degree from an accredited institution * Five or more years of experience in Identity & Access Management and enterprise IT environments * Strong expertise in: + Entra ID (Azure AD) + Active Directory (on-premises) + Hands-on experience with Conditional Access, MFA, SSO, and RBAC + Experience supporting Microsoft 365 / Exchange environments + Familiarity with email security solutions (e.g., Cisco IronPort or similar) + Strong PowerShell scripting skills for automation + Solid understanding of identity security principles (Zero Trust, least privilege) + Proven ability to troubleshoot complex identity and access issues * Experience with identity governance and access review processes * Hands-on experience with Privileged Identity Management (PIM) and privileged access strategies * Familiarity with Microsoft security and compliance tools * Experience implementing or supporting AI tools in IT operations * Hands-on experience with Microsoft Copilot or similar AI platforms * Knowledge of email authentication and security best practices * Relevant certifications (Microsoft 365, Azure, Security, etc.) ## Description As a Identity & Access Management (IAM) Engineer - Enterprise Technology Infrastructure with Hines, you will support, modernize, and continuously improve our enterprise identity and access infrastructure of the firm. This role will focus on Entra ID (Azure AD) and Active Directory, with additional responsibility supporting enterprise messaging platforms including Microsoft 365 (Exchange Online and Hybrid) and secure email gateways.The ideal candidate brings a strong AI-first mindset, proactively leveraging AI tools and automation to enhance operational efficiency, strengthen security posture, and elevate the end-user experience. This role is not just about maintaining identity systems-it's about rethinking how identity and access are managed through intelligent tooling, automation, and continuous optimization. Responsibilities include, but are not limited to: Identity & Access Management * Administer and optimize Entra ID (Azure AD) and on-premises Active Directory * Design and implement identity solutions including: * Configure and manage Single Sign-On (SSO) integrations in Entra ID for SaaS and enterprise applications (SAML, OIDC, OAuth) * Administer and maintain Enterprise Applications in Entra ID, including application onboarding, access assignment, and lifecycle management * Troubleshoot SSO, federation, and application authentication issues across internal and third-party platforms * Partner with application owners to design and implement secure, scalable authentication and authorization models * Multi-Factor Authentication (MFA) * Conditional Access policies * Identity Protection and risk-based access controls * Manage and enforce Privileged Identity Management (PIM), including role activation, just-in-time access, and privileged access governance * Manage identity lifecycle processes (joiner, mover, leaver) * Implement and enforce least privilege access and role-based access control (RBAC) * Troubleshoot complex authentication, federation, and directory-related issues * Support directory synchronization and hybrid identity configurations Security & Compliance * Apply Zero Trust principles across identity and access controls * Monitor, investigate, and respond to identity-related threats and anomalies * Support access reviews, certifications, and identity governance initiatives * Partner with security and compliance teams on audit readiness, risk mitigation, and policy enforcement Messaging & Email Infrastructure (Supporting Responsibility) * Support Microsoft 365 (Exchange Online) environments and core messaging functionality * Assist with troubleshooting mail flow issues and email-related incidents * Maintain awareness of email security controls and authentication standards (SPF, DKIM, DMARC) AI-First Operations & Automation * Apply an AI-first approach to problem solving, leveraging tools such as Microsoft Copilot and AI-assisted scripting to accelerate analysis and resolution * Design and implement automation solutions to reduce manual effort and improve reliability (PowerShell, workflows, orchestration tools) * Use AI to enhance troubleshooting, anomaly detection, and root cause analysis * Identify and lead opportunities to embed AI across identity, messaging, and security operations * Stay current on emerging AI capabilities within Microsoft 365, Azure, and enterprise IT ecosystems and translate them into practical use cases Documentation, Diagramming & Knowledge Management * Create and maintain clear, structured technical documentation for systems, processes, and configurations * Develop architecture and process diagrams using tools such as Microsoft Visio (or similar) to illustrate identity flows, access models, and integrations * Ensure documentation reflects current-state and future-state designs to support scalability and knowledge transfer * Contribute to internal knowledge bases and operational runbooks Collaboration & Continuous Improvement * Work cross-functionally with security, infrastructure, and application teams * Proactively identify opportunities for system optimization, automation, and risk reduction * Continuously improve identity security posture and user access experience * Participate in on-call support rotation as needed ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Dev Digest 210: AI Agents Are Go! Is MCP Dead? LLMs Crack Anonymity](https://www.wearedevelopers.com/magazine/709-dev-digest-210-ai-agents-are-go-is-mcp-dead-llms-crack-anonymity) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Stephan Gillich - Bringing AI Everywhere](https://www.wearedevelopers.com/magazine/489-stephan-gillich-bringing-ai-everywhere)