IAM Engineer (REMOTE)

Job DescriptionKey Responsibilities

• Design, implement, and support Microsoft identity and access management solutions.
• Administer and support Microsoft Entra ID environments.
• Configure and maintain Conditional Access policies and authentication controls.
• Implement and support Privileged Identity Management (PIM).
• Manage enterprise application integrations using SAML and OIDC.
• Support Single Sign-On (SSO) initiatives across cloud and on-premises applications.
• Administer Entra Connect synchronization between Active Directory and Microsoft Entra ID.
• Develop and support multi-factor authentication (MFA) strategies and deployments.
• Maintain and support Active Directory environments, including:
• Group Policy Management
• Password policies
• Account lockout policies
• Security hardening
• Support Windows Hello for Business implementations.
• Administer application security controls including AppLocker and security baselines.
• Support PKI and certificate infrastructure.
• Implement and maintain certificate-based authentication solutions.
• Troubleshoot identity-related incidents, authentication failures, and access issues.
• Partner with cybersecurity, infrastructure, and application teams on identity initiatives.
• Support identity modernization programs and emerging identity security projects., * Helps reduce backlog and operational demand on the Identity team.
• Drives successful implementation of Microsoft identity security capabilities.
• Supports workforce identity modernization efforts.
• Provides hands-on engineering expertise across core identity services.

• 5+ years of Identity & Access Management experience.
• Strong experience with Microsoft Entra ID (Azure AD).
• Experience implementing and managing:
• Conditional Access
• MFA
• Privileged Identity Management (PIM)
• SSO integrations
• Enterprise Applications
• App Registrations
• Strong Active Directory administration experience.
• Experience with Entra Connect synchronization.
• Working knowledge of PKI, certificates, and certificate-based authentication.
• Experience supporting identity security initiatives and authentication controls.
• Excellent troubleshooting and problem-solving skills.
• Ability to work independently in a fast-paced enterprise environment.

Preferred Qualifications

• Experience with phishing-resistant authentication solutions.
• Experience implementing passwordless authentication technologies.
• Experience with Windows Hello for Business.
• Experience supporting workforce identity verification initiatives.
• Familiarity with healthcare environments or regulated industries.
• Knowledge of Zero Trust architecture principles.
• Experience supporting large-scale Microsoft identity transformations.