Sr Information Security Engineer - IAM

Job Summary

Senior IAM Engineer is a hands-on technical role focused on the implementation, integration, and operation of enterprise identity solutions. This role is responsible for delivering and supporting Microsoft Entra , including the migration of existing identity platforms and applications to modern authentication models. Working closely with IAM Architecture and Security teams, the engineer executes identity initiatives across cloud and on‑premise environments, builds and maintains authentication and provisioning integrations while ensuring secure, reliable identity services that support the organization’s operation and security objectives.

Location: Springfield, MO. This is an on‑site position; remote work is not an option.

• Execute identity platform initiatives including migrations from legacy identity providers to Entra .
• Configure and maintain cross‑tenant identity scenarios including Multi‑Tenant collaboration, B2B, and External .
• Implement and support IAM solutions aligned with defined enterprise architecture, focusing on Microsoft Entra  hybrid identity environments.
• Configure and maintain core Entra : SSO, MFA, Conditional Access, Passwordless authentication, B2B access, Identity protection policies and risk‑based controls.
• Integrate applications using modern authentication protocols: OIDC, OAuth2, SAML.
• Configure and manage Enterprise Applications, App Registrations, API permissions and consent.
• Implement and maintain identity provisioning solutions using SCIM, API‑Based Provisioning, Event‑Drive or Scheduled workflows.
• Support and enhance identity lifecycle processes:
  Joiner / Mover / Leaver, Access Requests and Approvals, Role and Group‑Based access assignment.
• Develop Automation and Integration solutions using Powershell, Microsoft Graph API, and Logic Apps or equivalent tooling.
• Build reusable scripts and processes to standardize IAM operations.
• Support adoption of managed identities and service principals for application and workload authentication.
• Implement and support identity security controls aligned with organizational and regulatory requirements.
• Diagnose and resolve issues related to authentication failures, provisioning errors, directory synchronization issues, access and authorization problems.
• Provide technical input and feedback to improve IAM implementations and operational processes.
• Provide hands‑on technical mentorship and implementation guidance where appropriate at all levels.

• Core Services (user/group/device)
• Federated Identities
• Custom attributes and schema extensions
• Dynamic Groups
• Directory role strategies for enterprise delegation

• SSO
• Conditional Access
• Passwordless Authentication
• B2B

• User Risk Detection
• Sign‑in Risk Detection
• Using Risk with Conditional Access
• Risk Remediation Policies
• Supporting SIEM/SOAR integration
• Logs and Forensics

• Access Reviews
• Access Request Workflows
• Time‑Bound Access
• Identity and Access Lifecycle (Mover/Joiner/Leaver)
• Augmentation with Logic Apps and other automation technologies

• OIDC, OAuth2, SAML
• Enterprise Applications
• Application Registrations
• API permissions and consent
• Application Proxy
• Token Configuration and Claims Refinement

• Guest Users
• Cross‑Tenant access
• External IDs

• Experience with enterprise scale identity migrations
• Familiarity with Okta, Active Directory, Open LDAP or other identity providers. Active Directory experience is required.
• Deep knowledge of modern authentication protocols including but not limited to OIDC/OAuth2, SAML, WSFED, etc.
• Familiarity with modern authorization, session, and token handling patterns including but not limited to claims‑based authorization, back‑channel logout, token introspection, token refinement, etc.
• Strong knowledge of Entra  including but not limited to the features listed below:

• Retail Industry Experience with a strong understanding of store operations, merchandising, and omnichannel commerce.
• Auto Parts Industry Knowledge, including familiarity with aftermarket supply…