Identity Governance Engineer
Core
Design, build, and maintain enterprise Identity Governance and Administration capabilities across hybrid cloud environments to secure access for employees, contractors, partners, and non-human identities.
Role type
Senior Identity Governance Engineer (IC)
Builds
Enterprise identity governance, authentication policies, and automated provisioning/deprovisioning workflows for Microsoft 365, Azure, AWS, and SaaS.
Domain
Cybersecurity / Identity and Access Management (IAM)
Required skills
Microsoft Active Directory, Microsoft Entra ID, Identity Lifecycle Management, RBAC, Conditional Access, MFA, SAML, OAuth 2.0, OpenID Connect, SCIM, PowerShell, Python, REST APIs, PKI, Certificate-based Authentication, Privileged Access Management (PAM), SIEM integration
Preferred skills
Microsoft Entra ID Governance (Entitlement Management, Access Reviews, Lifecycle Workflows), 802.1X/EAP-TLS, Enterprise PAM across multi-cloud, B2B/external identity governance, Non-human identity security, CMMC/NIST SP 800-171 compliance
Technologies
AWS, Azure, Microsoft 365, Office 365, DevOps, Python, PowerShell, REST, OAuth, SAML, OpenID Connect, SCIM
Responsibilities
Manage identity lifecycle processes (provisioning, deprovisioning, access reviews), administer Active Directory and Entra ID, enhance Conditional Access and authentication policies, maintain PIM integrations, develop automation scripts, partner with Security Ops to remediate identity risks, govern non-human and partner identities.
Seniority
Senior, hands-on IC