Senior Identity & Access Management (IAM) Engineer, Workforce Identity
- Discuss this with your agent
- Open in Claude
- Open in ChatGPT
Role details
Tech stack
+15 more
Job description
Experteer Overview In this hands-on IAM role, you will design, automate, and operate Acrisure’s Workforce Identity Platform across Entra ID, Active Directory, and hybrid/cloud environments. You will create scalable identity patterns for secure, seamless access while upholding governance and compliance. You’ll work with cross-functional teams to turn identity into an enabler for users, applications, and services. This position offers the opportunity to shape enterprise security and authentication at scale within a growth-focused fintech leader. Compensation / Benefits * Design, implement, and maintain Microsoft Entra ID and Active Directory services for the enterprise * Develop and maintain identity architecture standards, authentication policies, and tenant governance * Manage and secure Entra ID tenant architecture and identity infrastructure * Implement and support Conditional Access, MFA, phishing-resistant authentication, and passwordless methods * Establish tenant security posture standards, admin tiering, and privileged identity controls * Design and maintain federation and enterprise SSO integrations (SAML, OIDC, OAuth2) * Support Entra B2B collaboration and external workforce access patterns * Define and maintain enterprise app onboarding standards and identity integration requirements * Automate provisioning/deprovisioning pipelines using identity APIs, SCIM, and orchestration platforms * Policy-as-code for IAM guardrails including least privilege and MFA enforcement * Engineer scalable automation to reduce manual identity operations and improve governance * Collaborate with AppSec and Cloud Engineering to secure authentication/authorization boundaries * Automate joiner/mover/leaver processes and support periodic access reviews and certifications * Deliver dashboards for identity risk indicators and support SOC 2, PCI DSS, ISO 27001 audits * Participate in on-call support and escalation for workforce identity services Tasks * 5+ years in Identity and Access Management engineering for hybrid/multi-cloud environments * Strong experience with Microsoft Entra ID, Active Directory, and hybrid identity architectures * Knowledge of AWS IAM, Azure identity services, and authentication tech (SAML, OIDC, OAuth2, SCIM) * Experience implementing Conditional Access, Identity Protection, MFA, passwordless authentication * Experience with Entra Connect, cloud synchronization, and hybrid identity operations * Automation experience with PowerShell, Microsoft Graph API, Python, Terraform * Experience with PAM platforms (Delinea, CyberArk, BeyondTrust, Azure PIM) * Experience with IGA platforms (SailPoint, Saviynt, Okta) * Understanding of Zero Trust, least privilege, RBAC, and privileged access design * Ability to translate business requirements into secure, scalable identity solutions * Strong troubleshooting across authentication, federation, and directory services Key requirements * comprehensive medical, dental, vision * life and disability insurance * 401(k) with immediate vesting * HSA and FSA options * paid time off and holidays * family and wellness benefits
Requirements
services, engineering for hybrid/multi-cloud environments * Strong experience with Microsoft Entra ID, Active Directory, and hybrid identity architectures * Knowledge of AWS IAM, Azure identity services, and authentication tech (SAML, OIDC, OAuth2, SCIM) * Experience implementing Conditional Access, Identity Protection, MFA, passwordless authentication * Experience with Entra Connect, cloud synchronization, and hybrid identity operations * Automation experience with PowerShell, Microsoft Graph API, Python, Terraform * Experience with PAM platforms (Delinea, CyberArk, BeyondTrust, Azure PIM) * Experience with IGA platforms (SailPoint, Saviynt, Okta) * Understanding of Zero Trust, least privilege, RBAC, and privileged access design * Ability to translate business requirements into secure, scalable identity solutions * Strong troubleshooting across authentication, federation, and directory services Key requirements * comprehensive medical, dental, vision * life and disability insurance * a aaaQ_ with immediate vesting * HSA and FSA options * paid time off and holidays * family and wellness benefits
Apply for this position
This job is hosted externally. Click below to view the full posting and apply.
Apply on us.experteer.comGood distractions
Talks and stories from around this role — technically off-topic, practically not.
Moments
Explore playlistsVideos
See allRelated articles
See all
Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.
Navigating the AI Shift
Highest Paying Tech Companies for Developers
The Biggest German Tech Companies