Senior Identity & Access Management (IAM) Engineer
Core
Design, integrate, and govern enterprise identity and access management using Microsoft Entra ID as the central platform.
Role type
Senior Identity & Access Management (IAM) Engineer
Builds
Automated provisioning/deprovisioning workflows, SSO integrations, and role-based access control mappings for SaaS and cloud platforms.
Domain
Enterprise IT / Identity & Access Management / Cloud Security
Required skills
Microsoft Entra ID (Azure AD) administration, SCIM-based provisioning/deprovisioning, SAML/OIDC SSO configuration, AWS IAM roles and federation, Palantir Foundry role mapping, Polarion role mapping, RBAC design, least-privilege access controls, identity governance audits, PowerShell scripting, Microsoft Graph API, AWS CLI/SDKs
Preferred skills
Palantir Foundry administration, Polarion administration, identity governance tools (SailPoint, Saviynt), Microsoft SC-300 certification, AWS Certified Security – Specialty
Technologies
Microsoft Entra ID, AWS IAM, Palantir Foundry, Polarion, SailPoint, Saviynt, PowerShell, Microsoft Graph API, AWS CLI
Responsibilities
Own end-to-end access management strategy and governance; Design and implement SCIM-based user provisioning/deprovisioning integrations; Configure and maintain SSO integrations (SAML/OIDC); Design and manage mapping of Palantir Foundry and Polarion roles to Entra ID security groups; Build automated workflows for SaaS license assignment/revoke; Configure and manage AWS IAM roles, policies, and identity federation; Implement and maintain conditional access policies, MFA, and least-privilege access controls; Partner with stakeholders to define RBAC models; Conduct periodic access reviews, certifications, and audits; Troubleshoot identity, SSO, and provisioning issues; Document IAM architecture and integration patterns.
Seniority
Senior, hands-on IC
