> Markdown version of [/jobs/ext/2376501-iam-rbac-engineer](https://www.wearedevelopers.com/jobs/ext/2376501-iam-rbac-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IAM/RBAC Engineer - **Company:** BNY - **Location:** Pittsburgh, PA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Azure, Configuration Management, Multi-Factor Authentication, Identity and Access Management, Role-Based Access Control, Azure Active Directory, Data Logging, Information Technology, Azure Resource Manager - **Published:** August 4, 2026 - **Apply:** https://www.adzuna.com/details/5823867995 ## About the Role * Bachelor's degree in Computer Science, Information Technology, or a related field. - Professional certifications in relevant technologies or infrastructure management are preferred. **EXPERIENCE:** Typically 6-10 years of experience. **SKILLS:** - Expertise in infrastructure operations and production services management. - Strong analytical and problem-solving capabilities. - Excellent communication and leadership skills. * Advanced hands-on experience with Microsoft Entra ID (formerly Azure AD), Azure RBAC, privileged identity management (PIM), and JIT access workflows. * Proven expertise in Azure Policy, managed identities, and provisioning Azure AD administrator roles for services. * Strong understanding of least-privilege access design, baseline configuration management, and maintaining accurate asset and data inventories. * Demonstrated ability to author IAM policies and procedures, perform access reviews, and support audit evidence collection. * Excellent communication and collaboration skills to work effectively across engineering, security, and operations teams. ## Description * Design, implement, and administer role-based access controls (RBAC) across Azure resources, defining and maintaining an enterprise role taxonomy. * Enforce least-privilege access principles through security groups, role assignments, and Just-in-Time (JIT) privileged access workflows. * Manage multi-factor authentication (MFA) and strong authenticator protection for privileged roles, including emergency access ("break-glass") procedures. * Develop and maintain IAM policies, conduct periodic access reviews, support audit readiness, and configure Azure-native monitoring and logging for identity and access events. ## Related Videos - [Backstage in Practice: Offloading Developer Operational Work Through Platform Self-Service](https://www.wearedevelopers.com/videos/1922-backstage-in-practice-offloading-developer-operational-work-through-platform-self-service) - [Developer Tools for Microsoft Azure](https://www.wearedevelopers.com/videos/450-developer-tools-for-microsoft-azure) - [Full-stack role-based authorization in 45 minutes](https://www.wearedevelopers.com/videos/312-full-stack-role-based-authorization-in-45-minutes) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Develop enterprise-ready applications for Microsoft Teams with Azure resources on modern web technologies](https://www.wearedevelopers.com/videos/187-develop-enterprise-ready-applications-for-microsoft-teams-with-azure-resources-on-modern-web-technologies) - [Build Delightful Mobile Experiences with Kotlin, Realm, and Atlas Device Sync](https://www.wearedevelopers.com/videos/694-build-delightful-mobile-experiences-with-kotlin-realm-and-atlas-device-sync) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [Coffee with Developers - Maria Apazoglou - Making AI understandable for all in production](https://www.wearedevelopers.com/magazine/475-coffee-with-developers-maria-apazoglou-making-ai-understandable-for-all-in-production)