Identity & Access Management (IAM) Engineer – Enterprise Technology Infrastructure

Overview

When you join Hines, you will embark on a career journey fueled by vision and guided by leaders who set the standards of our industry. Our legacy is rooted in innovation and excellence, earning us a spot on Fast Company’s esteemed annual list of the World’s Most Innovative Companies, as well as recognition as one of U.S. News & World Report’s Best Companies to Work For in 2024.

Discover endless opportunities to grow and make your mark at Hines.

As a Identity & Access Management (IAM) Engineer – Enterprise Technology Infrastructure with Hines, you will support, modernize, and continuously improve our enterprise identity and access infrastructure of the firm. This role will focus on Entra  (Azure AD) and Active Directory, with additional responsibility supporting enterprise messaging platforms including Microsoft 365 (Exchange Online and Hybrid) and secure email gateways. The ideal candidate brings a strong AI-first mindset, proactively leveraging AI tools and automation to enhance operational efficiency, strengthen security posture, and elevate the end-user experience.

This role is not just about maintaining identity systems—it’s about rethinking how identity and access are managed through intelligent tooling, automation, and continuous optimization. Responsibilities include, but are not limited to:

Identity & Access Management

• Administer and optimize Entra  (Azure AD) and on-premises Active Directory
• Design and implement identity solutions including:
• Configure and manage Single Sign-On (SSO) integrations in Entra  SaaS and enterprise applications (SAML, OIDC, OAuth)
• Administer and maintain Enterprise Applications in Entra , including application onboarding, access assignment, and lifecycle management
• Troubleshoot SSO, federation, and application authentication issues across internal and third-party platforms
• Partner with application owners to design and implement secure, scalable authentication and authorization models
• Multi-Factor Authentication (MFA)
• Conditional Access policies
• Identity Protection and risk-based access controls
• Manage and enforce Privileged Identity Management (PIM), including role activation, just-in-time access, and privileged access governance
• Manage identity lifecycle processes (joiner, mover, leaver)
• Implement and enforce least privilege access and role-based access control (RBAC)
• Troubleshoot complex authentication, federation, and directory-related issues
• Support directory synchronization and hybrid identity configurations

Security & Compliance

• Apply Zero Trust principles across identity and access controls
• Monitor, investigate, and respond to identity-related threats and anomalies
• Support access reviews, certifications, and identity governance initiatives
• Partner with security and compliance teams on audit readiness, risk mitigation, and policy enforcement

Messaging & Email Infrastructure (Supporting Responsibility)

• Support Microsoft 365 (Exchange Online) environments and core messaging functionality
• Assist with troubleshooting mail flow issues and email-related incidents
• Maintain awareness of email security controls and authentication standards (SPF, DKIM, DMARC)

AI-First Operations & Automation

• Apply an AI-first approach to problem solving, leveraging tools such as Microsoft Copilot and AI-assisted scripting to accelerate analysis and resolution
• Design and implement automation solutions to reduce manual effort and improve reliability (Power Shell, workflows, orchestration tools)
• Use AI to enhance troubleshooting, anomaly detection, and root cause analysis
• Identify and lead opportunities to embed AI across identity, messaging, and security operations
• Stay current on emerging AI capabilities within Microsoft 365, Azure, and enterprise IT ecosystems and…