Azure IAM Engineer; Microsoft Entra

Azure IAM Engineer (Microsoft Entra )

Experience: 6–8 years

• More than 5 years of IAM experience, with 3+ years in Microsoft Azure / Entra .
• Deep knowledge of Azure RBAC, PIM, Conditional Access, Entra .
• Experience with MFA enforcement, Authentication methods, Access policies.
• Understanding of Identity lifecycle management, Access certification processes.
• Familiarity with Microsoft Defender for Cloud, Secure Score recommendations.
• Experience with Service Now or ticketing system integrations for IAM workflows.
• Microsoft Certified - Identity and Access Administrator (SC-300) preferred.
• Strong documentation and stakeholder communication skills.

• Design and implement Azure Entra  (formerly Azure AD) identity governance frameworks.
• Configure and manage Privileged Identity Management (PIM) for just-in-time privileged access.
• Implement and enforce Conditional Access policies, MFA, phishing‑resistant authentication: FIDO2, Passkeys.
• Manage RBAC role assignments across Azure subscriptions, Resource groups, Management groups.
• Remediate guest user accounts, stale identities, excessive permission assignments.
• Configure and maintain Break Glass (emergency access) accounts with monitoring and alerting.
• Integrate Microsoft Defender for Cloud governance rules with Service Now for ticketing workflows.
• Support cross‑cloud IAM alignment across AWS IAM, OCI IAM.
• Participate in IAM audits, access reviews, compliance reporting.
• Develop IAM runbooks, RBAC mapping documentation, onboarding guides.

• Experience with AWS IAM, AWS Organizations, SCPs.
• Knowledge of OCI IAM compartments, policy structures.
• Exposure to SASE, Zero Trust Network Access (ZTNA) frameworks.