Azure IAM Engineer

Piper Companies; Durham (NC); Hybrid; USD 115,000 - 135,000; Full time

Job summary

Piper Companies is seeking an Azure IAM Engineer to design, implement, and maintain enterprise identity solutions across a modern Azure environment. This role is largely remote with occasional onsite meetings in the Raleigh/Durham, NC area.

The candidate will manage Azure Entra ID, SSO, MFA, RBAC/ABAC policies, and identity governance while collaborating with security and infrastructure teams to ensure secure access to resources.

Qualifications

• 4+ years of IAM engineering or administration experience.
• Experience with Azure Entra ID (Azure AD).
• Strong background in Microsoft Azure services and cloud architectures.
• Experience with SSO, MFA, RBAC, ABAC.
• Knowledge of SAML, OAuth, OpenID Connect, LDAP.
• Experience supporting hybrid identity environments.
• Microsoft certifications are a plus.

Responsibilities

• Design, implement, and support IAM solutions in Microsoft Azure environments.
• Administer and optimize Azure Entra ID services, including user lifecycle management.
• Configure and maintain identity federation, SSO, and MFA solutions.
• Implement and manage RBAC and ABAC policies.
• Collaborate with security, infrastructure, and applications teams for secure access.
• Troubleshoot authentication, authorization, and identity issues in cloud and hybrid environments.
• Develop and maintain IAM documentation, standards, procedures.
• Support security audits and identity governance best practices.

Skills

IAM engineering

Azure Entra ID

RBAC / ABAC

SAML / OAuth / OIDC / LDAP

Hybrid identity

Troubleshooting

Communication skills

Job description

Piper Companies is seeking an Azure IAM Engineer to join a leading organization within the technology and professional services industry. The Azure IAM Engineer will play a key role in designing, implementing, and maintaining enterprise identity and access management solutions across a modern Azure environment. This position is primarily remote, with a preference for candidates located in the Raleigh/Durham, NC area who can attend occasional onsite meetings and collaborate with stakeholders as needed.

Responsibilities of the Azure IAM Engineer:

• Design, implement, and support identity and access management solutions within Microsoft Azure environments.
• Administer and optimize Azure Entra ID (Azure Active Directory) services, including user lifecycle management and directory integrations.
• Configure and maintain identity federation, Single Sign-On (SSO), and Multi-Factor Authentication (MFA) solutions.
• Implement and manage Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) policies.
• Collaborate with security, infrastructure, and application teams to ensure secure access to enterprise resources.
• Troubleshoot authentication, authorization, and identity-related issues across cloud and hybrid environments.
• Develop and maintain IAM documentation, standards, and operational procedures.
• Support security audits, compliance initiatives, and identity governance best practices.

Qualifications of the Azure IAM Engineer:

• 4+ years of experience in Identity and Access Management (IAM) engineering or administration.
• Previous experience working with Azure Entra ID (Azure AD).
• Strong background with Microsoft Azure services and cloud architecture.
• Experience with identity federation, Single Sign-On (SSO), Multi-Factor Authentication (MFA), RBAC, and/or ABAC.
• Understanding of authentication protocols such as SAML, OAuth, OpenID Connect, and LDAP.
• Experience supporting hybrid identity environments and integrating enterprise applications.
• Strong troubleshooting, analytical, and communication skills.
• Relevant Microsoft certifications are a plus.

Compensation for the Azure IAM Engineer includes:

• Salary range: $115,000 - $135,000 depending on experience
• Comprehensive benefits package including medical, dental, vision, 401(k), and PTO

This job opens for applications on 10/05/2026. Applications for this job will be accepted for at least 30 days from the posting date.