IAM Engineer

Talentify; Charlotte (NC); On-site; USD 90,000 - 120,000; Full time

Job summary

Talentify in Atlanta and Charlotte seeks an IAM Engineer to design and implement enterprise identity patterns, zero trust controls, and strong authentication across endpoints and applications.

You will collaborate with cyber and enterprise teams to deliver scalable Entra ID configurations, CA policies, and MFA integrations, enabling secure access at scale.

Qualifications

• Design enterprise IAM architectures and authentication models aligned with security standards.
• Configure Entra ID tenants, trust relationships, and entitlement management.
• Implement zero-trust design with CA policies and device trust requirements.
• Utilize FIDO2, passkeys, WHfB for strong authentication.
• Migrate federated apps and validate SAML/OIDC/OAuth flows.

Responsibilities

• Collaborate with Cyber and Enterprise architectures to select IAM patterns and translate into engineering designs.
• Coordinate with SMEs across End User tech, Network services, and other teams on IAM designs and pilots.
• Work with PM to identify tasks, resources, and timelines for program deliverables.
• Configure Entra ID identity, trust settings, and entitlement management.
• Implement Conditional Access with phishing-resistant MFA and risk-based controls.
• Migrate federated applications and validate authentication flows.
• Support procurement and management of FIDO2 keys and passkeys; enable Windows Hello for BusinessRollouts.

Skills

IAM Architecture

Entra ID Admin

Zero Trust

FIDO2 & Passkeys

Identity Federation

PAM & Least Privilege

IAM Program Delivery

External ID Microsoft Entra

Tools

Microsoft Entra ID

SAML/OIDC/OAuth

Windows Hello for Business

Job description

Title: IAM Engineer
Location: Atlanta and Charlotte
Onsite/Remote – 100% (Onsite)
Duration: 12 Months

Business Initiative/Purpose:

(Goal, Business Impact, Accomplishments from the work)

Enables rapid implementation of secure access controls, external identity architecture, and strong authentication (FIDO2, passkeys). This accelerates risk reduction, validates designs, supports migrations, and ensures scalable, policy-driven IAM capabilities are deployed.

Description

Bachelor Degree:

(Required, Preferred or Not Required)

• Not Required.

Role Responsibilities:

• Work with Cyber and Enterprise architectures to on selection (and development as needed) of appropriate IAM patterns, and translate into engineering / implementation designs.
• Work with SMEs across other technology teams (End User tech: Desktop, Mobile, Collab, VDI, etc; Network services: VPN) on IAM designs, configuration, pilot testing & implementation)
• Work with Project Management team to identify (and size: resource requirements and timelines)technical tasks to implement various program deliverables
• Configure Entra ID identity, trust settings, and entitlement management
• Implement Conditional Access with phishing-resistant MFA (FIDO2) and risk-based controls
• Migrate federated applications and validate authentication flows
• Help develop and support processes to procure and manage FIDO2 keys, manage implementation of passkeys, and provide IAM support for Windows Hello for Business rollouts
• Enable step-up authentication for sensitive operations
• Identify break glass accounts and secure privileged access paths according to Architecture patterns
• Validate playbooks, assess lifecycle models, and support deployment expansion

Must Have Skills/Prior Experiences:

• Identity & Access Management (IAM) Architecture - Ability to design and implement enterprise identity patterns, authentication models, authorization frameworks, and access governance aligned with security and enterprise architecture standards.
• Microsoft Entra ID Administration & Engineering - Expertise in configuring Entra ID tenants, identity trust relationships, entitlement management, application integrations, and hybrid identity solutions.
• Zero Trust & Conditional Access Design - Experience implementing risk-based access controls, Conditional Access policies, device trust requirements, and adaptive security measures based on Zero Trust principles.
• Strong Authentication Technologies (FIDO2, Passkeys, WHfB) - Knowledge of phishing-resistant authentication methods including FIDO2 security keys, passkeys, Windows Hello for Business, and modern credential lifecycle management.
• Identity Federation & Application Migration - Ability to migrate federated applications, validate SAML/OIDC/OAuth authentication flows, troubleshoot identity integrations, and modernize legacy authentication platforms.
• Privileged Access Management (PAM) & Secure Administration - Experience securing privileged accounts, managing break-glass access, implementing least-privilege models, and protecting administrative access paths.
• IAM Program Delivery & Cross-Functional Engineering - Capability to collaborate with architecture, endpoint, networking, and project management teams to design, pilot, estimate, and deploy IAM solutions at enterprise scale.
• Identity Architecture and Microsoft Entra External ID

EEO

“Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of – Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.”