Microsoft Entra IAM Engineer

As a Microsoft Entra IAM Engineer, you will lead the design, implementation, and governance of enterprise Identity and Access Management solutions across hybrid and cloud environments. This role focuses on Microsoft Entra ID, Active Directory modernization, Zero Trust security, identity governance, access management, and compliance initiatives to ensure secure and scalable identity services across the organization., Design and maintain enterprise IAM architectures using Microsoft Entra ID and Active Directory. Implement secure hybrid identity solutions, identity lifecycle automation, and Zero Trust principles. Lead the design and optimization of Conditional Access, MFA, passwordless authentication, and Identity Protection capabilities. Architect and govern Entra ID Governance solutions including PIM, Access Reviews, Entitlement Management, and role-based controls. Manage SSO integrations, federation services, SCIM provisioning, and application onboarding. Design and strengthen Active Directory security through hardening, privileged access controls, and governance initiatives. Develop identity security standards, governance frameworks, and compliance controls. Collaborate with cloud, infrastructure, security, and DevSecOps teams to integrate identity controls into enterprise platforms. Create architecture diagrams, roadmaps, technical documentation, and solution recommendations. Mentor engineering teams and drive continuous improvement across authentication, authorization, and identity governance programs.

8+ years of experience in Identity & Access Management, Identity Architecture, or IAM Engineering. Deep expertise with Microsoft Entra ID, Conditional Access, Identity Protection, Entra Governance, and Active Directory. Strong experience with SSO technologies including OAuth2, OpenID Connect (OIDC), SAML, and WS-Federation. Experience implementing identity lifecycle management, provisioning, and access governance solutions. Strong knowledge of Zero Trust architecture, MFA, passwordless authentication, and risk-based access controls. Experience securing hybrid identity environments using Entra Connect, federation services, and cloud-native identity models. Expertise in Terraform Infrastructure as Code (IaC), automation frameworks, CI/CD pipelines, and PowerShell scripting. Strong understanding of IAM risk management, audit requirements, and compliance frameworks including SOX, HIPAA, GDPR, and ISO 27001. Experience with modern IAM platforms such as SailPoint, CyberArk, Okta, Microsoft Identity Manager, or similar solutions is preferred. Excellent leadership, communication, stakeholder management, problem-solving, and strategic planning skills; Microsoft certifications such as SC-300, SC-100, or AZ-305 are highly preferred. The hourly range for roles of this nature are $50.00 to $80.00/hr. Rates are heavily dependent on skills, experience, location, and industry. cyberThink is an Equal Opportunity Employer.