Platform Engineer

• Analyze and modernize identity lifecycle management across Active Directory and Entra ID.
• Automate provisioning, ownership enforcement, and deprovisioning for service and non-human accounts.
• Design and implement enterprise IAM solutions and integrations.
• Lead Active Directory consolidation and decommissioning of legacy domains.
• Support PAM onboarding including privileged account vaulting and credential management.
• Implement RBAC and PIM strategies.
• Conduct AD and Entra security assessments and drive remediation.
• Design and support PKI modernization, certificate lifecycle management, and certificate authority rationalization.
• Develop technical designs, architecture documentation, and operational procedures.
• Collaborate with security, infrastructure, and operations teams to improve identity governance and compliance.
• Onboard Tier 0, Tier 1, and Tier 2 privileged accounts into CyberArk or equivalent PAM platforms.
• Enforce Zero Standing Privilege principles and deploy Privileged Access Workstations.
• Consolidate and decommission legacy MGMT and iDMZ AD domains and standardize AD baselines.
• Automate service account lifecycle, improve ownership controls, and enhance cross-tenant governance in Entra ID.

Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance., * 8+ years of IAM engineering experience.

• Expertise in Active Directory architecture, administration, and engineering.
• Entra ID / Azure AD and Microsoft Identity Manager (MIM).
• Active Directory Federation Services (ADFS) and LDAP integrations.
• CyberArk or other enterprise PAM platforms.
• RBAC and PIM implementation.
• PKI architecture and certificate management.
• AD domain migrations and legacy domain decommissioning.
• Identity governance and compliance remediation.
• Vendor and supplier management in outsourced environments.
• Preferred: CyberArk expertise, Idira experience, cross-tenant Entra ID governance, security baseline assessments, and enterprise-scale identity modernization.

Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.

W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality. If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following:

When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.

Eliassen Group is a strategic consulting firm that helps organizations reach further and achieve more through our technology, business advisory, and life sciences solutions. For nearly 40 years, we have combined exceptional people, deep domain expertise, and intelligent capabilities to expand our clients’ capacity and accelerate meaningful outcomes. We are driven by a purpose to positively impact the lives of our employees, clients, consultants, and the communities we serve.