IAM Engineer

Insight Global; Dallas (TX); Sur place; USD 120 000 - 160 000; Plein temps

Résumé du poste

Insight Global is seeking an experienced IAM Engineer to design, manage, and improve identity and access management across cloud and on‑prem environments. The role focuses on lifecycle management, authentication, authorization, and governance with Entra ID and AD.

Responsibilities include automating joiner/mover/leaver workflows, configuring SSO/MFA, and implementing risk‑based access controls. Collaboration with cybersecurity, HR, and audit teams is essential.

Qualifications

• Bachelor’s degree or equivalent experience.
• 3 years of relevant experience in identity and access management.
• Hands‑on experience with Microsoft Entra ID and Active Directory in enterprise environments.
• Experience with identity lifecycle management, automated provisioning and deprovisioning, access governance, and RBAC.
• Knowledge of SAML, OAuth 2.0, OpenID Connect, and SCIM.
• Experience configuring MFA, Conditional Access, SSO, and privileged access controls.
• Proficiency with PowerShell, Microsoft Graph, and REST APIs.

Responsabilités

• Design and maintain identity lifecycle processes for employees, contractors, partners, and service accounts.
• Automate joiner, mover, and leaver workflows using authoritative identity sources and policy based provisioning.
• Configure and support Entra ID, Active Directory, and hybrid identity synchronization.
• Develop role‑based and group‑based access controls and access packages.
• Build automation using PowerShell, Graph, APIs and workflow tools.
• Implement and support SSO, MFA, and risk‑based access controls.
• Configure and troubleshoot SAML, OAuth 2.0, OpenID Connect, SCIM and other identity protocols.
• Integrate enterprise applications with identity providers and provisioning platforms.
• Support privileged access controls, just‑in‑time access, and governance.
• Monitor identity‑related security events and support audits and compliance.

Connaissances

IAM

Entra ID

Active Directory

Identity governance

Automation

Zero trust

RBAC

SAML

OAuth 2.0

OpenID Connect

SCIM

Federation

Formation

Bachelor’s degree

Outils

PowerShell

Microsoft Graph

REST APIs

Description du poste

Job Description

We are seeking an experienced IAM Engineer to design, manage, and continuously improve enterprise identity and access management services across cloud and on-premises environments. This role will support identity lifecycle management, authentication, authorization, access governance, directory services, federation, and privileged access.

The ideal candidate will have hands‑on experience with Microsoft Entra ID, Active Directory, identity governance, automation, and modern authentication technologies. This individual will partner with cybersecurity, HR, infrastructure, application, audit, and business teams to deliver secure and reliable identity solutions.

Key Responsibilities

Design and maintain identity lifecycle processes for employees, contractors, partners, and service accounts.

Automate joiner, mover, and leaver workflows using authoritative identity sources and policy‑based provisioning.

Configure and support Microsoft Entra ID, Active Directory, hybrid identity synchronization, and directory‑integrated applications.

Develop role‑based and group‑based access controls, entitlement structures, and access packages.

Build automation using PowerShell, Microsoft Graph, APIs, and workflow tools.

Implement and support SSO, MFA, passwordless authentication, Conditional Access, and risk‑based access controls.

Configure and troubleshoot SAML, OAuth 2.0, OpenID Connect, SCIM, and other identity protocols.

Integrate enterprise applications with identity providers and provisioning platforms.

Support privileged access controls, just‑in‑time access, and administrative role governance.

Manage access reviews, certification campaigns, separation‑of‑duties controls, and governance reporting.

Monitor identity‑related security events and support incident response, audits, and compliance assessments.

Troubleshoot complex provisioning, synchronization, authentication, and access issues.

Maintain technical documentation, operational procedures, and troubleshooting guides.

Evaluate new identity technologies and recommend improvements to security and user experience.

Skills and Requirements

Bachelor’s degree or equivalent experience

3 years of relevant experience

3+ years of experience in identity and access management, directory services, cybersecurity engineering, or a related technical role

Hands‑on experience with Microsoft Entra ID and Active Directory in enterprise environments

Experience with identity lifecycle management, automated provisioning and deprovisioning, access governance, and role‑based access control

Knowledge of modern authentication and federation standards, including SAML, OAuth 2.0, OpenID Connect, and SCIM

Experience configuring multifactor authentication, Conditional Access, single sign‑on, and privileged access controls

Experience with PowerShell, Microsoft Graph, REST APIs, or comparable scripting and integration technologies

Understanding of least privilege, zero trust, separation of duties, and identity‑related security controls

Experience integrating IAM platforms with human resources systems and enterprise applications

Experience with Microsoft Entra ID Governance, Privileged Identity Management, entitlement management, and access reviews

Knowledge of privileged access management platforms and service account governance

Experience with identity monitoring, logging, reporting, and security incident investigation

Familiarity with IT service management, change control, audit evidence, and compliance frameworks

Identity and security certifications such as: Microsoft Certified: Identity and Access Administrator Associate (SC-300)

Microsoft Certified: Cybersecurity Architect Expert (SC-100)

Certified Information Systems Security Professional (CISSP)

Certified Information Security Manager (CISM)

Identity platform or privileged access management certifications relevant to the enterprise environment

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to [e-mail].