Hybrid IAM Engineer Lead: Entra, AD & AWS Access

Pretium Enterprise Services, India; Scottsdale (AZ); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

401(k) match

Health, dental, vision, life insurance

Paid Time Off

11 firm holidays

Hybrid office/WFH arrangement

Annual year-end bonus eligible

Job summary

Pretium Enterprise Services seeks an Identity and Access Management Engineer Lead to design, build and operate IAM capabilities across PES operating companies. This hands-on role owns the identity roadmap, focusing on IGA, access controls, and integrations across Microsoft, AWS, and business apps.

You will configure platforms, automate processes, troubleshoot production issues, and establish reusable standards with a strong emphasis on role-based access, federation, and privileged access

Qualifications

• Senior IAM engineering experience owning enterprise identity solutions from design through production support.
• Bachelor’s degree in a relevant field is required.
• Hands-on delivery of enterprise IGA implementation through go-live and support.
• Strong Microsoft Entra ID and AD engineering skills including federation and CA.
• Experience with AWS workforce federation and Azure access controls.
• Ability to implement and troubleshoot SAML, OIDC, OAuth and SCIM integrations.
• Strong PowerShell or Python skills and REST API experience.

Responsibilities

• Assess IAM environments, prioritize risks and deliver a phased IAM roadmap.
• Own hands-on IGA implementation, including platform configuration and onboarding.
• Automate joiner/mover/leaver processes across HR systems and apps.
• Engineer Entra ID and AD controls: SSO, MFA, CA, directory sync.
• Design workforce access across AWS and Azure; manage permissions.
• Establish privileged-access controls and audits; reduce excess permissions.
• Define RBAC, birthright rules and segregation of duties; enforce workflows.

Skills

IAM engineering

Entra/AD engineering

AWS IAM Center/Azure access

SAML/OIDC/OAuth/SCIM

PowerShell/Python

REST/API automation

RBAC/least privilege

Documentation/mentoring

Education

Bachelor’s Degree in Computer Science, Cybersecurity, Information Security, Computer Engineering, Software Engineering, or Information Technology

Tools

Microsoft Entra ID

Active Directory

AWS IAM Identity Center

Azure AD/Conditional Access

SAML/OIDC/OAuth/SCIM

Job description

Pretium Enterprise Services seeks an Identity and Access Management Engineer Lead to design, build and operate IAM capabilities across PES operating companies. This hands-on role owns the identity roadmap, focusing on IGA, access controls, and integrations across Microsoft, AWS, and business apps.

You will configure platforms, automate processes, troubleshoot production issues, and establish reusable standards with a strong emphasis on role-based access, federation, and privileged access