Sr. IAM Administrator Microsoft Entra

Title

Sr. IAM Administrator for Microsoft Entra

Latham, New York

24 months

NY State - Office of the Attorney General

SLG-26-12075

IAM/IGA Administrator for Microsoft Entra responsible for enforcing identity security controls, governing access policies, and ensuring compliance through centralized management of identities and entitlements. The role safeguards the organization by overseeing access certifications, implementing zero‑trust identity practices, and maintaining oversight of identity‑related risks and workflows.

• Managing identity lifecycle governance, automation, integration and access systems and ensuring secure access to both on‑premises and cloud‑based resources.

• 12+ years of identity and access management experience, including Oracle Identity, Microsoft AD and Microsoft Entra.
• 7+ years of experience with LDAP directories, Single Sign-On (SSO), identity federation, privileged access management, and automated lifecycle management.
• 4+ years of experience with MS Entra , role‑based access control, Active Directory attributes, and privileged identity management.
• 4+ years of experience configuring MS Entra l access policies, enforcing MFA, and securing authentication methods to reduce identity‑related risks.
• 4+ years of experience implementing controls, identity lifecycle management and third‑party integrations (e.g., Service Now) for automation using MS Entra  in a Microsoft G5 GCC environment.
• 4+ years of experience administering and maintaining RBAC in MS Entra , including the creation of custom roles, access reviews, and ensuring alignment with least‑privilege principles.
• 4+ years of experience using Active Directory and Entra  attributes to automate access provisioning and group memberships through dynamic group rules.
• 4+ years of experience with Privileged Identity Management (PIM), configuring just‑in‑time access to critical roles, implementing approval workflows, and conducting periodic access reviews.
• Bachelor’s degree in Computer Science or a related field.
• Capable of working 100% onsite.
• Plans and carries out security measures to protect an organization’s computer networks and systems.