Identity Management Engineer

We are seeking an experienced Identity Management Engineer with strong expertise in Microsoft Entra  (Azure AD), Identity and Access Management (IAM), Privileged Access Management (PAM), Cyber Ark, and Certificate Management within a Microsoft Azure environment. This individual will be responsible for designing, implementing, and supporting enterprise identity and access solutions while ensuring secure authentication, authorization, privileged access, and certificate lifecycle management.

• Design, implement, and manage identity and access management solutions using Microsoft Entra  (Azure AD) and Azure technologies.
• Manage and support IAM and PAM platforms, policies, and processes across the enterprise.
• Administer and maintain Cyber Ark
  , including privileged account onboarding, access controls, credential management, and privileged session management.
• Implement and manage Entra capabilities, including Conditional Access, Multi-Factor Authentication (MFA), Single Sign-On (SSO), Role-Based Access Control (RBAC), and identity governance.
• Manage the certificate lifecycle within Azure environments, including certificate issuance, renewal, expiration monitoring, and revocation.
• Support Azure Key Vault and related certificate, key, and secrets management processes.
• Integrate enterprise applications with Entra  modern authentication and federation protocols such as SAML, OAuth 2.0, and OpenID Connect (OIDC).
• Develop and maintain processes for user provisioning, deprovisioning, access reviews, and privileged account management.
• Troubleshoot complex identity, authentication, authorization, and certificate-related issues.
• Partner with Security, Infrastructure, Cloud, and Application teams to strengthen identity security and implement IAM best practices.
• Assist with identity security audits, compliance requirements, vulnerability remediation, and continuous improvement initiatives.

• Strong hands-on experience with Microsoft Entra  (Azure Active Directory) in enterprise environments.
• Extensive knowledge of Identity and Access Management (IAM) and Privileged Access Management (PAM) concepts and technologies.
• Strong hands-on experience administering and supporting Cyber Ark
  .
• Experience with certificate management and PKI concepts in Microsoft Azure environments.
• Experience with Azure Key Vault
  , certificate lifecycle management, secrets management, and key management.
• Strong understanding of MFA, SSO, Conditional Access, RBAC, identity governance, and privileged identity management
  .
• Knowledge of authentication and federation technologies, including SAML, OAuth, and OpenID Connect
  .
• Strong troubleshooting skills and the ability to work across security, cloud, infrastructure, and application teams.
• Experience working in large-scale enterprise Azure environments is highly preferred.