IAM Architect: Microsoft Entra, Workday & Azure

Resource-Innovations; Denver (CO); On-site; USD 75,000 - 115,000; Full time

Job summary

Resource Innovations is seeking a highly skilled Microsoft IAM Engineer to lead administration, governance, security, and operational maturity of our enterprise identity environment, focusing on Microsoft Entra ID and Workday integration.

The role supports Azure, on-prem AD, SSO, MFA, RBAC, PIM, and automation via PowerShell; travel up to 15%; preference for Denver and other major west/east locations.

Qualifications

• 3+ years IAM administration required; 5 years preferred.
• 3+ years hands-on Microsoft Entra / AD administration; 5 years preferred.
• Experience integrating Workday with identity platforms.
• Experience supporting and administering Microsoft Azure environments.
• Strong scripting automation in PowerShell.
• Willing to travel up to 15%.

Responsibilities

• Administer and support enterprise IAM services across Microsoft Entra ID, Azure environments, and on-premises Active Directory.
• Manage user lifecycle processes including onboarding, transfers, role changes, and offboarding.
• Configure and maintain authentication and access controls including SSO, MFA, Conditional Access, passwordless, SSPR, RBAC, PIM, and Managed Identities.
• Manage enterprise applications, registrations, API permissions, and federated authentication integrations (SAML, OAuth, OpenID Connect, SCIM).
• Administer privileged access controls and role-based security models supporting least-privilege and Zero Trust.
• Support identity governance initiatives including access reviews, entitlement management, and governance policies.
• Manage identity integrations for cloud-native, SaaS, and Microsoft 365 platforms.
• Support Azure tenant governance including subscriptions and security policies.
• Develop automation via PowerShell, Graph API, Azure Automation, and IaC.
• Participate in incident response and root cause analysis.

Skills

IAM administration

PowerShell automation

Microsoft Entra ID

Workday integration

Azure AD

Identity governance

RBAC

MFA

SAML/OAuth/OpenID

Education

Bachelor's degree in IT/CS

Tools

PowerShell scripting

Microsoft Graph API

Azure Automation

Infrastructure-as-Code

Job description

Resource Innovations is seeking a highly skilled Microsoft IAM Engineer to lead administration, governance, security, and operational maturity of our enterprise identity environment, focusing on Microsoft Entra ID and Workday integration.

The role supports Azure, on-prem AD, SSO, MFA, RBAC, PIM, and automation via PowerShell; travel up to 15%; preference for Denver and other major west/east locations.