> Markdown version of [/jobs/ext/1808681-iam-engineer](https://www.wearedevelopers.com/jobs/ext/1808681-iam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IAM Engineer - **Company:** Jobot - **Location:** Houston, United States - **Experience:** Expert - **Salary:** $140,000.0 - $160,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Artificial Intelligence, Application Services, Microsoft Azure, Domainkeys Identified Mail, Domain-Based Message Authentication Reporting and Conformance (DMARC), Multi-Factor Authentication, Identity and Access Management, Information Technology Operations, Microsoft Security Essentials, Microsoft Visio, OAuth, OpenID, Windows PowerShell, Role-Based Access Control, Azure Active Directory, Zero Trust Network Access, Security Assertion Markup Language (SAML), Single Sign-On, User Provisioning Software, Workflow Management Systems, Enterprise Software Applications, Microsoft Power Automate, Sender Policy Framework (SPF) - **Published:** July 21, 2026 - **Apply:** https://www.dice.com/job-detail/cd5f61e8-9711-4d49-b5cc-cbb6cccad802 ## About the Role Bachelor's degree in a relevant field. 5+ years of hands-on experience in Identity & Access Management within enterprise environments. Strong expertise in Entra ID (Azure AD), on-premises Active Directory, Conditional Access, MFA, SSO, PIM, and RBAC. Experience supporting Microsoft 365 / Exchange Online. Proficiency with PowerShell scripting for automation. Solid understanding of Zero Trust, identity governance, and email security best practices. Familiarity with Microsoft security/compliance tools and experience implementing AI-assisted IT operations (Copilot or similar). Relevant certifications (Azure, Microsoft 365, Security) preferred. ## Description Design, implement, and troubleshoot Single Sign-On (SSO) integrations using SAML, OIDC, and OAuth for internal and third-party applications. Manage Enterprise Applications in Entra ID, handling onboarding, access provisioning, and lifecycle governance. Configure and enforce Multi-Factor Authentication (MFA), Conditional Access policies, Identity Protection, and risk-based controls. Oversee Privileged Identity Management (PIM), just-in-time access, and privileged access governance. Implement and manage identity lifecycle processes (joiner/mover/leaver) and role-based access control (RBAC) following least-privilege principles. Troubleshoot complex authentication, federation, and directory synchronization issues. Apply Zero Trust principles across identity systems and support access reviews and certification processes. Messaging & Email Infrastructure (Secondary Focus) Support Microsoft 365 Exchange Online environments, including mail flow troubleshooting. Maintain knowledge of email security standards (SPF, DKIM, DMARC) and related gateway solutions. AI-First Operations & Automation Leverage Microsoft Copilot and other AI tools for accelerated troubleshooting, anomaly detection, and root cause analysis. Develop automation solutions using PowerShell, workflows, and orchestration tools to reduce manual tasks. Identify and implement AI-enhanced capabilities across identity, security, and messaging operations. Stay current with emerging Microsoft AI and security features and translate them into practical improvements. Documentation & Collaboration Create and maintain technical documentation, architecture diagrams (using Visio or equivalent), and operational runbooks. Partner closely with security, infrastructure, application, and compliance teams. Participate in on-call rotation and drive continuous improvement initiatives. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Going Beyond Passwords: The Future of User Authentication](https://www.wearedevelopers.com/videos/714-going-beyond-passwords-the-future-of-user-authentication) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [How to Become an AI Engineer](https://www.wearedevelopers.com/magazine/331-how-to-become-an-ai-engineer) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)