IAM Engineer

Mindlance; Charlotte (NC); On-site; USD 120,000 - 170,000; Full time

Job summary

Mindlance is seeking an experienced IAM Architect to drive secure access architecture across enterprise environments in Charlotte, NC. You will design and implement enterprise identity patterns, integrate Microsoft Entra, and enforce Zero Trust principles.

The role involves collaborating with cross-functional teams, migrating federated applications, and deploying risk-based access controls including phishing-resistant MFA. Strong leadership and program delivery skills are essential for success.

Qualifications

• Design enterprise IAM architectures and authentication models aligned with security standards.
• Configure Entra ID tenants, trust relationships, entitlement management, and hybrid identity solutions.
• Implement risk-based access controls and CA policies in line with Zero Trust.
• Knowledge of phishing-resistant authentication methods including FIDO2 keys, passkeys, and Windows Hello for Business.
• Migrate federated apps and validate SAML/OIDC/OAuth flows; troubleshoot identity integrations.
• Secure administration with least-privilege models and break-glass access controls.

Responsibilities

• Collaborate with cyber and enterprise architectures to select and design IAM patterns.
• Work with SMEs across IT teams on IAM designs, config, pilot testing, and implementation.
• Coordinate with Project Management to size resources and timelines for IAM deliverables.
• Configure Entra ID identity, trust settings, and entitlement management.
• Implement Conditional Access with phishing-resistant MFA and risk-based controls.
• Migrate federated applications and validate authentication flows; manage IAM key provisioning.
• Support Windows Hello for Business rollouts and step-up authentication for sensitive tasks.
• Identify break-glass accounts and secure privileged access paths according to architecture patterns.
• Validate playbooks, lifecycle models, and deployment expansion.

Skills

IAM Architecture

Entra ID Administration

Zero Trust

FIDO2 / Passkeys

Identity Federation

PAM / Privileged Access

IAM Program Delivery

Microsoft Entra External ID

Job description

Enables rapid implementation of secure access controls, external identity architecture, and strong authentication (FIDO2, passkeys). This accelerates risk reduction, validates designs, supports migrations, and ensures scalable, policy-driven IAM capabilities are deployed.

Description

• Not Required.

Role Responsibilities

• Work with Cyber and Enterprise architectures to on selection (and development as needed) of appropriate IAM patterns, and translate into engineering / implementation designs.
• Work with SMEs across other technology teams (End User tech: Desktop, Mobile, Collab, VDI, etc; Network services: VPN) on IAM designs, configuration, pilot testing & implementation)
• Work with Project Management team to identify (and size: resource requirements and timelines)technical tasks to implement various program deliverables
• Configure Entra ID identity, trust settings, and entitlement management
• Implement Conditional Access with phishing-resistant MFA (FIDO2) and risk-based controls
• Migrate federated applications and validate authentication flows
• Help develop and support processes to procure and manage FIDO2 keys, manage implementation of passkeys, and provide IAM support for Windows Hello for Business rollouts
• Enable step-up authentication for sensitive operations
• Identify break glass accounts and secure privileged access paths according to Architecture patterns
• Validate playbooks, assess lifecycle models, and support deployment expansion

Must Have Skills/Prior Experiences

• Identity & Access Management (IAM) Architecture - Ability to design and implement enterprise identity patterns, authentication models, authorization frameworks, and access governance aligned with security and enterprise architecture standards.
• Microsoft Entra ID Administration & Engineering - Expertise in configuring Entra ID tenants, identity trust relationships, entitlement management, application integrations, and hybrid identity solutions.
• Zero Trust & Conditional Access Design - Experience implementing risk-based access controls, Conditional Access policies, device trust requirements, and adaptive security measures based on Zero Trust principles.
• Strong Authentication Technologies (FIDO2, Passkeys, WHfB) - Knowledge of phishing-resistant authentication methods including FIDO2 security keys, passkeys, Windows Hello for Business, and modern credential lifecycle management.
• Identity Federation & Application Migration - Ability to migrate federated applications, validate SAML/OIDC/OAuth authentication flows, troubleshoot identity integrations, and modernize legacy authentication platforms.
• Privileged Access Management (PAM) & Secure Administration - Experience securing privileged accounts, managing break-glass access, implementing least-privilege models, and protecting administrative access paths.
• IAM Program Delivery & Cross-Functional Engineering - Capability to collaborate with architecture, endpoint, networking, and project management teams to design, pilot, estimate, and deploy IAM solutions at enterprise scale.
• Identity Architecture and Microsoft Entra External ID

EEO

“Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of – Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.”