> Markdown version of [/jobs/ext/2015837-identity-access-management-iam-engineer-workforce-identity](https://www.wearedevelopers.com/jobs/ext/2015837-identity-access-management-iam-engineer-workforce-identity). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Identity & Access Management (IAM) Engineer, Workforce Identity - **Company:** Acrisure LLC - **Location:** Valhalla, NY, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Access, Active Directory, Application Programming Interfaces (APIs), Amazon Web Services, Data Analysis, User Authentication, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Engineering, Cyber Security, Multi-Factor Authentication, Federated Identity Management, Identity and Access Management, Python (Programming Language), OAuth, OpenID, PCI Data Security Standards, Windows PowerShell, Role-Based Access Control, Software Tools, Azure Active Directory, Phishing, Zero Trust Network Access, Security Assertion Markup Language (SAML), Security Information and Event Management, Enterprise Software Applications, Okta, Cyberark, Software Security, Multi-Cloud, HR Software, Deployment Automation, CIS Benchmarks, Api Design, SailPoint, Terraform - **Published:** August 10, 2026 - **Apply:** https://www.dice.com/job-detail/2b8793ee-1d87-484f-8ba1-ccb4bc478e0d ## About the Role * 5+ years of experience in Identity and Access Management engineering supporting hybrid and multi-cloud enterprise environments. * Strong experience administering Microsoft Entra ID, Active Directory, and hybrid identity architectures at enterprise scale. * Strong knowledge of AWS IAM, Azure identity services, and authentication technologies including SAML, OIDC, OAuth2, and SCIM. * Strong experience implementing and operating Conditional Access, Identity Protection, MFA, phishing-resistant authentication, and passwordless authentication solutions. * Experience with Entra Connect, cloud synchronization, and hybrid identity operations. * Experience with PowerShell, Microsoft Graph API, Python, Terraform, or other automation technologies. * Experience with PAM platforms such as Delinea, CyberArk, BeyondTrust, or Azure PIM. * Experience with identity governance and administration (IGA) platforms such as SailPoint, Saviynt, or Okta. * Strong understanding of Zero Trust Architecture, least privilege, RBAC, and privileged access design principles. * Proven ability to translate business requirements into secure, scalable, and supportable identity solutions. * Strong troubleshooting skills across authentication, federation, access governance, and directory services., * Experience supporting large-scale Microsoft Entra ID tenant administration and governance programs. * Familiarity with NIST 800-63, NIST CSF, CIS Controls, and Zero Trust Maturity Models. * Experience integrating IAM, PAM, and IGA telemetry into SIEM platforms. * Experience securing workforce, workload, and machine identities in cloud-native environments. * Relevant certifications such as: CISSP, CISM, Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Azure Security Engineer Associate, AWS Security Specialty, Okta Certified Professional, SailPoint Certified Engineer Candidates should be comfortable with an on-site presence to support collaboration, team leadership, and cross-functional partnership. ## Description You will be a hands-on IAM engineer responsible for designing, automating, and operating Acrisure's Workforce Identity Platform across Microsoft Entra ID, Active Directory, cloud platforms, and enterprise applications. You will build paved-road patterns for identity federation, authentication, least privilege, privileged access management, and lifecycle governance while ensuring authentication and authorization boundaries remain secure, measurable, and frictionless., * Design, implement, and maintain Microsoft Entra ID and Active Directory services supporting the enterprise workforce. * Develop and maintain workforce identity architecture standards, authentication policies, and tenant governance controls. * Manage and secure Entra ID tenant architecture and identity infrastructure. * Implement and support Conditional Access, MFA, phishing-resistant authentication, passwordless authentication, and Identity Protection capabilities. * Establish and maintain tenant security posture standards, administrative tiering strategies, and privileged identity controls. * Design and maintain federation and enterprise SSO integrations using SAML, OIDC, OAuth2, and related identity protocols. * Support Entra B2B collaboration and external workforce access patterns. * Define and maintain enterprise application onboarding standards and identity integration requirements. Workforce Identity Operations and Administration * Implement and support SAML/OIDC application integrations across SaaS, cloud, and enterprise platforms. * Manage group administration, dynamic group lifecycle management, and directory governance processes. * Administer Entra Connect, cloud synchronization, and hybrid identity platforms. * Troubleshoot authentication, federation, Conditional Access, synchronization, and access-related issues. * Govern application registrations, service principals, enterprise applications, and API permissions. * Manage guest-user onboarding, lifecycle management, access reviews, and external collaboration controls. * Maintain directory hygiene, tenant monitoring, operational support procedures, and identity health reporting. * Develop automation solutions using PowerShell, Microsoft Graph API, Terraform, and related identity engineering tools. Cross-Training and Operational Resiliency * Develop broad expertise across both Entra ID and Active Directory platforms. * Participate in structured cross-training programs to ensure workforce identity services do not depend on a single individual. * Maintain shared runbooks, architecture documentation, standards, and operational procedures. * Participate in on-call support and escalation activities for workforce identity services as required. Architect and Automate Identity Foundations Work with Identity Architects and Identity Automation Engineering to: * Design and maintain secure-by-default IAM architectures across Entra ID, AWS IAM, and hybrid enterprise systems. * Develop paved-road templates for access control patterns such as federated access, role assumption, service accounts, and workload identities. * Automate provisioning and deprovisioning pipelines using identity APIs, SCIM, and workflow orchestration platforms. * Implement policy-as-code for IAM guardrails including least privilege, Conditional Access, MFA enforcement, and privilege expiration. * Engineer scalable automation to reduce manual identity operations and improve governance consistency. Access Control, Federation, and Governance * Engineer federated identity solutions for users, applications, partners, and services using SAML, OIDC, OAuth2, and SCIM. * Manage Conditional Access policies, adaptive authentication, Identity Protection controls, and passwordless authentication strategies. * Define and enforce least privilege for human and non-human identities across AWS, Azure, SaaS, and enterprise platforms. * Integrate IAM governance with enterprise GRC systems to ensure traceability, certification, and audit readiness. * Partner with AppSec and Cloud Engineering teams to secure authentication and authorization boundaries across applications, APIs, and services. * Define standards for enterprise application onboarding, identity integration, and access governance. * Support administrative tiering and privileged access separation strategies across the enterprise. Lifecycle and Risk Management Work with the appropriate teams to: * Automate joiner, mover, and leaver processes through API-driven workflows and HR system integrations. * Support periodic access reviews, certifications, and entitlement recertification campaigns. * Deliver evidence and support for SOC 2, PCI DSS, ISO 27001, cyber insurance, and regulatory audits. * Develop and maintain dashboards for identity risk indicators, including: * Automated provisioning rates * MFA adoption * Stale and orphaned accounts * Access review completion * Failed recertifications * Access-removal SLA performance * Prioritize remediation using risk-based approaches and ensure compliance with internal SLAs. Detection and Response Integration * Collaborate with Security Operations to define identity-centric detections, including impossible travel, lateral movement, privilege abuse, and account compromise. * Correlate identity events with endpoint, cloud, and application telemetry to identify potential threats. * Assist in incident response activities involving identity-based attacks, credential theft, and privileged access abuse. * Support forensic investigations through identity and authentication data analysis. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Navigating the AI Shift](https://www.wearedevelopers.com/magazine/629-navigating-the-ai-shift) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)