Azure IAM & RBAC Engineer – JIT Access Specialist

IntePros; Pittsburgh (Allegheny County); On-site; USD 110,000 - 170,000; Full time

Job summary

IntePros is seeking an IAM/RBAC Engineer with deep hands-on experience in Microsoft Entra ID and Azure RBAC. This role designs, implements, and governs secure, scalable access controls across Azure environments while enforcing least-privilege principles and maintaining audit-ready identity operations.

You will build an enterprise-wide role taxonomy, map permissions to roles, implement Just-in-Time access, manage Privileged Identity Management, enforce MFA, and drive ongoing access reviews and

Qualifications

• Experience implementing least-privilege RBAC at scale.
• Ability to develop IAM policies and procedures and lead access governance reviews.
• Experience governing remote, elevated, and emergency access processes.
• Strong technical writing, documentation, and stakeholder communication skills.

Responsibilities

• Define and maintain an enterprise-wide Azure role taxonomy.
• Map permissions to roles and enforce least-privilege access via security groups and role assignments.
• Eliminate broad or direct privilege assignments.
• Document role-to-permission mappings and track changes.
• Implement Just-in-Time (JIT) access workflows with approval and time-bound permissions.
• Configure and govern Privileged Identity Management (PIM) processes.
• Establish standards for VPN, jump host, and privileged session usage.
• Define and oversee emergency "break-glass" access procedures, including incident notification and review.
• Configure Azure-native monitoring and logging for identity and access events.
• Route alerts to service owners and security teams.
• Validate emergency access usage through incident workflows and post-event review.
• Support audit readiness across access-related controls.

Skills

Entra ID

Azure RBAC

Least privilege

JIT access

PIM

MFA enforcement

Audit readiness

Technical writing

Tools

Azure Policy

Managed identities

Azure Monitor

Security groups

Job description

IntePros is seeking an IAM/RBAC Engineer with deep hands-on experience in Microsoft Entra ID and Azure RBAC. This role designs, implements, and governs secure, scalable access controls across Azure environments while enforcing least-privilege principles and maintaining audit-ready identity operations.

You will build an enterprise-wide role taxonomy, map permissions to roles, implement Just-in-Time access, manage Privileged Identity Management, enforce MFA, and drive ongoing access reviews and