IAM Engineer

Growing company looking for their next IAM leader

This Jobot Job is hosted by:
Adam Bennett
Are you a fit? Easy Apply now by clicking the "Apply Now" button and sending us your resume.
Salary: $140,000 - $160,000 per year

A bit about us:

We are a global leader in real estate investment, development, and property management, recognized for our forward-thinking approach and consistent delivery of exceptional results. With a rich history spanning decades, our organization has built a reputation for blending creativity with operational excellence. We've earned accolades as one of the most innovative companies in our sector and as a top workplace, thanks to our commitment to cutting-edge solutions and a people-first culture.

Our teams thrive in an environment that values bold ideas, continuous learning, and the use of advanced technology to drive efficiency and long-term success.

Why join us?

Joining our team means becoming part of a dynamic organization where your contributions directly impact enterprise-wide technology strategy and security posture. You'll work alongside industry leaders who prioritize innovation, professional growth, and work-life balance. We offer:

Opportunities to lead transformative initiatives in a complex, hybrid enterprise environment
Access to the latest MS technologies and AI-powered tools to streamline your work
A collaborative culture that encourages cross-functional partnerships and knowledge sharing
Competitive compensation, comprehensive benefits, and meaningful recognition for your expertise
The chance to solve challenging problems at scale while helping shape the future of identity and access management in a global organization

Here, your ideas matter, and you'll have the autonomy to implement intelligent automation and modern solutions that enhance security and user experience.

Job Details

Core Responsibilities:

Identity & Access Management

Administer and optimize Entra  Active Directory environments, including hybrid synchronization.
Design, implement, and troubleshoot Single Sign-On (SSO) integrations using SAML, OIDC, and OAuth for internal and third-party applications.
Manage Enterprise Applications in Entra , handling onboarding, access provisioning, and lifecycle governance.
Configure and enforce Multi-Factor Authentication (MFA), Conditional Access policies, Identity Protection, and risk-based controls.
Oversee Privileged Identity Management (PIM), just-in-time access, and privileged access governance.
Implement and manage identity lifecycle processes (joiner/mover/leaver) and role-based access control (RBAC) following least-privilege principles.
Troubleshoot complex authentication, federation, and directory synchronization issues.
Apply Zero Trust principles across identity systems and support access reviews and certification processes.

Messaging & Email Infrastructure (Secondary Focus)

Support Microsoft 365 Exchange Online environments, including mail flow troubleshooting.
Maintain knowledge of email security standards (SPF, DKIM, DMARC) and related gateway solutions.

AI-First Operations & Automation

Leverage Microsoft Copilot and other AI tools for accelerated troubleshooting, anomaly detection, and root cause analysis.
Develop automation solutions using Power Shell, workflows, and orchestration tools to reduce manual tasks.
Identify and implement AI-enhanced capabilities across identity, security, and messaging operations.
Stay current with emerging Microsoft AI and security features and translate them into practical improvements.

Documentation & Collaboration

Create and maintain technical documentation, architecture diagrams (using Visio or equivalent), and operational runbooks.
Partner closely with security, infrastructure, application, and compliance teams.
Participate in on-call rotation and drive continuous improvement initiatives.

Minimum Qualifications

Bachelor's degree in a relevant field.
5+ years of hands-on experience in Identity & Access Management within enterprise environments.
Strong expertise in Entra  (Azure AD), on-premises Active Directory, Conditional Access, MFA, SSO, PIM, and RBAC.
Experience supporting Microsoft 365 / Exchange Online.
Proficiency with Power Shell…