Part time - Hybrid - Identity and Access Management (IAM) Engineer (Active Directory & Entra ID) - San Francisco, CA

We are seeking a skilled IAM Engineer to design, implement, and maintain our enterprise identity infrastructure. In this role, you will bridge the gap between our legacy environment and our cloud ecosystem. You will be responsible for managing user lifecycle, security, and access controls across on-premises Active Directory (AD) and Microsoft Entra ID. The ideal candidate ensures seamless authentication, robust security posture, and optimal system availability for our global workforce., On-Premises Active Directory Management

• Maintain domain infrastructure: Deploy, configure, and troubleshoot Domain Controllers, DNS, DHCP, and AD replication.
• Policy Administration: Create, test, and enforce Group Policy Objects (GPOs) to secure endpoints and servers.
• Directory Maintenance: Manage OU structures, group memberships, and perform routine health checks and schema updates.

Microsoft Entra ID & Cloud Governance

• Cloud Identity Management: Administer Entra ID tenants, managing enterprise applications, app registrations, and service principals.
• Access Control: Design and enforce Conditional Access Policies, Multi-Factor Authentication (MFA), and Self-Service Password Reset (SSPR).
• Privileged Access: Implement and audit Microsoft Entra Privileged Identity Management (PIM) and Identity Protection.

Hybrid Synchronization & Integration

• Identity Sync: Manage and monitor hybrid identity synchronization using Microsoft Entra Connect (cloud sync / sync engine).
• Single Sign-On (SSO): Configure and troubleshoot SSO integrations with third-party SaaS applications using SAML 2.0, OAuth 2.0, and OpenID Connect.

Security & Compliance

• Audit & Remediation: Conduct regular access reviews, monitor identity logs for suspicious activity, and resolve vulnerabilities.
• Lifecycle Automation: Automate user onboarding, offboarding, and role adjustments using PowerShell scripts.

We currently have an opening for the position of Identity and Access Management (IAM) Engineer. Candidates must have strong experience working with government agencies., * Experience: 5+ years of dedicated experience managing Active Directory and Microsoft Entra ID environments.

• Protocols & Standards: Deep understanding of Kerberos, LDAP, NTLM, SAML, OAuth, and OIDC.
• Scripting: Proficiency in PowerShell for directory automation and bulk management tasks.
• Device Management: Familiarity with hybrid join scenarios and Microsoft Intune / MDM basics.
• Problem Solving: Strong analytical skills to diagnose complex authentication, federation, and replication issues.

Preferred Certifications

• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Enterprise Administrator Expert