Microsoft Entra ID (IAM) Engineer

$130000 - $160000 per year | Houston, TX | Hybrid | Permanent

Become the Microsoft Entra t Driving Enterprise Identity Security

We are a globally recognized real estate investment and development organization known for innovation, operational excellence, and investing in leading-edge technology. Our enterprise technology organization supports a large, complex global environment where security, automation, and scalability are foundational to everything we do.

We're looking for a Microsoft Entra  (IAM) Engineer who wants to own and evolve our enterprise identity platform. This is an opportunity to become one of our organization's technical leaders for Microsoft Entra  partnering with Infrastructure, Security, Messaging, and Application teams to modernize identity, strengthen security, and leverage AI-powered automation across the enterprise.

If you're passionate about Microsoft identity technologies, Zero Trust security, automation, and solving complex enterprise challenges, this is an opportunity to make a lasting impact.

• Join one of the world's premier real estate investment and development firms
• Work with modern Microsoft cloud technologies and AI-powered solutions
• Be part of a team driving enterprise-wide identity modernization
• Competitive compensation and comprehensive benefits package
• Generous PTO and vacation program
• Ongoing training and professional development
• Opportunity to influence enterprise security strategy
• Collaborative culture focused on innovation and continuous improvement
• Long-term career growth within a global organization

As our Microsoft Entra  (IAM) Engineer, you will serve as the organization's primary technical expert for Microsoft Entra  (formerly Azure Active Directory). You will lead the administration, optimization, automation, and modernization of our enterprise identity platform while supporting Active Directory, Microsoft 365, Exchange Online, and identity governance initiatives.

This role is ideal for someone who enjoys designing secure identity architectures, solving complex authentication challenges, automating identity operations, and leveraging AI to improve enterprise security and operational efficiency.

• Serve as the organization's subject matter expert for Microsoft Entra .
• Design, administer, and optimize enterprise Microsoft Entra .
• Lead enterprise identity modernization initiatives.
• Design secure authentication and authorization architectures.
• Administer Enterprise Applications within Entra .
• Manage identity lifecycle processes including Joiners, Movers, and Leavers.
• Design and implement Role-Based Access Control (RBAC).
• Administer Privileged Identity Management (PIM).
• Configure and optimize:
  • Conditional Access
  • Multi-Factor Authentication (MFA)
  • Identity Protection
  • Identity Governance
  • Access Reviews
  • Lifecycle Workflows
• Support hybrid identity and directory synchronization.

• Configure and manage Single Sign-On using:
  • SAML
  • OAuth
  • OpenID Connect (OIDC)
• Troubleshoot authentication, federation, and directory issues.
• Partner with application owners to integrate secure authentication solutions.
• Implement Zero Trust identity strategies.
• Maintain least-privilege access across enterprise systems.

• Support Microsoft 365 identity services.
• Administer Exchange Online.
• Support Exchange Hybrid environments.
• Troubleshoot authentication and mail flow issues.
• Support secure email technologies including:
  • SPF
  • DKIM
  • DMARC
• Maintain awareness of secure email gateway technologies such as Cisco Iron Port.

• Utilize Microsoft Copilot to improve operational efficiency.
• Develop Power Shell automation for identity administration.
• Automate provisioning, deprovisioning, and identity governance.
• Evaluate Microsoft Graph API capabilities.
• Use AI-driven tools for troubleshooting, analytics, and operational improvements.
• Identify opportunities to automate repetitive IAM processes.

• Apply Zero Trust principles throughout the enterprise.
• Monitor identity-related threats and security events.
• Support identity governance initiatives.
• Conduct access reviews and certification campaigns.
• Partner with Security teams on audits and compliance initiatives.
• Improve enterprise security posture through continuous optimization.

• Maintain technical documentation and operational runbooks.
• Create architecture diagrams using Microsoft Visio.
• Document identity architectures and operational procedures.
• Develop standards and best practices for enterprise identity management.

• Partner with Infrastructure, Security, Messaging, and Application teams.
• Recommend improvements to enterprise identity architecture.
• Participate in enterprise technology initiatives.
• Participate in an on-call rotation as needed.

• Bachelor's degree or equivalent experience.
• 5+ years of enterprise…