IAM Engineer

IAM Engineer

The IAM Engineer will work with Microsoft Entra  (Azure AD), Active Directory, and Single Sign-On (SSO) technologies to enable secure user access and enforce the principle of least privilege across various platforms and applications. The ideal candidate will have a strong technical background in identity and access management and be able to support and troubleshoot complex IAM-related issues.

Essential Functions

• IAM Implementation and Administration
• Active Directory and Entra
• SSO Configuration and Support
• Security and Compliance
• Identity Lifecycle Management
• Technical Support and Collaboration
• Documentation and Reporting

Requirements

Must be able to travel to Lottery offices statewide and/or other locations, as required. Ability to provide on-call support for IAM issues during critical events.

Preferred Qualifications

5+ years of experience in Identity and Access Management (IAM) with a focus on Microsoft Entra  (Azure AD), Active Directory, and SSO integration. Experience with SSO technologies including SAML, OAuth, and OpenID Connect. Strong understanding of Active Directory architecture, including forests, domains, trusts, and replication. Hands-on experience with MFA, conditional access policies, and identity protection. Familiarity with regulatory compliance frameworks such as PCI, 201 CMR 17, and NIST.

Experience in identity lifecycle management, including provisioning, de-provisioning, and access reviews. Strong problem-solving and troubleshooting skills with IAM systems. Relevant certifications such as Microsoft Certified:
Azure Solutions Architect Expert, CISSP, or Certified Identity and Access Manager (CIAM) preferred.

EEO: "Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of – Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans."