Senior Infrastructure Security Engineer - Identity and Access Management (IAM)
Core
Design, implement, and support enterprise identity solutions to enable secure authentication, automated provisioning, and access governance across hybrid environments.
Role type
Senior IC Infrastructure Security Engineer (IAM)
Builds
Secure identity platforms, automated provisioning pipelines, and access control policies for enterprise applications.
Domain
Enterprise Identity & Access Management (IAM) / Cloud Security
Required skills
Microsoft Entra ID, Active Directory, SAML 2.0, OpenID Connect, OAuth 2.0, SCIM, Role-Based Access Control (RBAC), PowerShell, Microsoft Graph, API integration, Identity Lifecycle Management, Conditional Access, MFA, Privileged Identity Management (PIM), Troubleshooting complex authentication flows, Hybrid identity synchronization, Least privilege principles, Engineering specifications, Agile delivery
Preferred skills
Regulated environment compliance (SOX, PCI), Identity tenant migrations, Passwordless authentication implementation, Security analytics tools (Azure Monitor, Splunk), Vendor platform experience (Silverfort, Bloodhound, Veza, CyberArk, Okta, SailPoint)
Technologies
Microsoft Entra ID, Active Directory, Azure, AWS IAM concepts, ServiceNow, SAP, PowerShell, Microsoft Graph, REST APIs, JSON, XML, SQL, SAML, OIDC, OAuth, SCIM, Kerberos, LDAP, Entra Connect
Responsibilities
Engineer and support IAM capabilities across Microsoft Entra ID and Active Directory; Onboard and integrate applications using SSO protocols (SAML, OIDC, OAuth, SCIM); Design and maintain RBAC, permission sets, and segregation-of-duties controls; Support identity lifecycle processes for joiners, movers, and leavers; Develop and enforce Conditional Access, MFA, and PIM controls; Plan and execute tenant-to-tenant and hybrid identity changes; Troubleshoot complex authentication, authorization, and federation issues at L2/L3; Automate operational activities via PowerShell and APIs; Collaborate with architects and security teams to translate requirements into secure solutions; Create engineering specifications, architecture diagrams, and audit-ready documentation.
Seniority
Senior, hands-on IC