Identity & Access Management; IAM Engineer

Identity & Access Management (IAM) Engineer

$130000 - $160000 per year | Houston, TX | Hybrid | Permanent

We are a globally recognized real estate investment and development organization with a long‑standing reputation for innovation, operational excellence, and investing in cutting‑edge technology. Our technology team supports a large, complex enterprise environment where security, scalability, and automation are at the forefront of everything we do.

• Join one of the world's premier real estate investment and development firms
• Work with modern Microsoft cloud technologies and AI‑powered solutions
• Be part of a team driving enterprise‑wide identity modernization
• Competitive compensation and comprehensive benefits package
• Generous PTO and vacation program
• Ongoing training and professional development
• Opportunity to influence enterprise security strategy
• Collaborative culture focused on innovation and continuous improvement
• Long‑term career growth within a global organization

As the Identity & Access Management (IAM) Engineer, you’ll play a critical role in supporting, modernizing, and continuously improving our enterprise identity and access infrastructure.

This position focuses on Microsoft Entra  (Azure AD) and Active Directory, while also supporting Microsoft 365 messaging environments, secure email infrastructure, and enterprise identity governance. We’re looking for someone with an AI‑first mindset who enjoys leveraging automation, Microsoft Copilot, and intelligent tooling to simplify operations, strengthen security, and improve the end‑user experience. This role goes beyond traditional IAM administration—you’ll help shape how enterprise identity is managed through automation, Zero Trust principles, and continuous optimization.

• Administer and optimize Microsoft Entra  (Azure AD) and on‑premises Active Directory
• Design and implement secure enterprise identity solutions
• Configure and manage Single Sign‑On (SSO) integrations using SAML, OAuth, and OpenID Connect (OIDC)
• Administer Enterprise Applications within Entra , including onboarding, provisioning, access assignments, and lifecycle management
• Troubleshoot authentication, federation, SSO, and directory‑related issues
• Partner with application owners to design secure authentication and authorization models
• Implement and manage:
  • Multi‑factor Authentication (MFA)
  • Conditional Access Policies
  • Identity Protection
  • Risk‑Based Access Controls
• Administer Privileged Identity Management (PIM), including just‑in‑time access and privileged governance
• Manage Joiner, Mover, and Leaver identity lifecycle processes
• Implement least privilege and role‑based Access Control (RBAC)
• Support hybrid identity environments and directory synchronization

• Apply Zero Trust principles across enterprise identity
• Monitor and respond to identity‑related threats and anomalies
• Support identity governance initiatives, access reviews, and certification campaigns
• Partner with security and compliance teams to support audits, policy enforcement, and risk mitigation

• Support Microsoft 365 and Exchange Online environments
• Assist with Exchange Hybrid administration and troubleshooting
• Resolve mail flow and messaging issues
• Support email security technologies including SPF, DKIM, and DMARC
• Maintain awareness of secure email gateway solutions such as Cisco Iron Port or similar technologies

• Utilize Microsoft Copilot and AI‑assisted tools to accelerate troubleshooting and operational efficiency
• Develop Power Shell automation and orchestration workflows
• Use AI to improve root cause analysis, anomaly detection, and operational support
• Identify opportunities to automate identity, messaging, and security operations
• Evaluate emerging Microsoft AI capabilities and implement practical enterprise use cases

• Develop and maintain technical documentation and operational runbooks
• Create architecture and process diagrams using Microsoft Visio or similar tools
• Document current‑state and future‑state identity…