Sr IAM Engineer

• Microsoft Entra
• Active Directory
• Hybrid Identity
• Federation
• SSO, MFA
• Conditional Access & Identity security best practices

The Senior IAM Entra Engineer is responsible for IAM platform engineering, operational support and governance for several IT infrastructure products and services. This role is responsible for the secure, stable, and compliant operations of MS Entra  within the enterprise identity ecosystem. This role supports secure authentication, authorization, and identity lifecycle management. That includes conditional access, privilege identity governance, application design and integration, implementation, administration of hybrid identity services across cloud and on premises environments.

Participates in 24 x7 IAM operations and service ownership, vendor product lifecycle management and maintenance, security vulnerability and patch management, change management and release governance as well as platform engineering and best practices. You will ensure that IAM technologies and services meet applicable federal and state regulations like (NIST 800-63, CMMC, FERPA, HIPPA, HITECH, GLBA, PCI-DSS and applicable privacy laws)
You will guide, assist with the work of other engineers using full technical knowledge and thorough understanding of functionality. Help with cross-training on all products and services by staying on top of new skill development within the industry.

• Engineer, administer, and support Microsoft Entra , including tenant configuration, sync, authentication methods, identify protection capabilities, and access policies.
• Discover, Design, implement, govern and maintain security identity solutions for human and non‑human accounts.
• Support hybrid identity environments integrating on premise Active Directory and Microsoft Entra .
• Manage directory synchronization, federation, and authentication services, including MS Entra Connect and cloud sync solutions.
• Extensive experience integrating enterprise, SaaS, cloud and custom applications with MS Entra .
• Experience migrating large portfolios of applications from legacy authentication platforms to MS Entra .
• Configure and maintain enterprise application integrations for SAML, OAuth, OpenD Connect and WS- deration.

• Administer, and maintain end-to-end availability, reliability and performance of IAM platforms
• Participate in 24x7 on call rotation, coverage and escalation paths
• Participate in major incident (P1/P2) response for identity and access disruptions
• Manage IAM TDX ticket ques, ensure remediation - responses, problem resolution, and root cause analysis (RCA), documentation and communication are tracked and complete within appropriate SLA's.
• Maintain continuous audit readiness posture
• Maintain dashboards for IAM service health: to include system

• Execute product upgrades within IAM global calendar lifecycle, following appropriate IAM processes, documentation, testing, change management and communications.
• Maintain current vendor-supported versions to minimize risk exposure
• Evaluate vendor release notes for security vulnerability fixes, major and minor releases, and integration impacts.
• Partner with vendors and managed service providers for platform optimization and support escalations.

• Ensure change management processes and procedures are followed. That includes: all appropriate documentation, testing, peer review, Pre-CAB, CAB.
• Ensure appropriate coordination with other teams and communication with CAB
• Ensure all changes have appropriate rollout plan inclusive of impact assessment, backout plan, and post implementation support.