IAM Engineer

Jobot; Houston (TX); On-site; USD 140,000 - 160,000; Full time

Benefits offered by this job

AI tools access

Competitive compensation

Recognition for expertise

Job summary

Jobot in Houston is seeking an senior IAM leader to drive identity and access strategy across a hybrid enterprise. You will administer Entra ID and Active Directory, implement SSO, MFA, and RBAC, and collaborate with security, infrastructure, and compliance teams to strengthen the organization’s security posture.

The role offers the opportunity to influence the enterprise technology roadmap, leverage AI-powered tools, and work with cutting-edge Microsoft technologies in a collaborative

Qualifications

• Bachelor’s degree in a relevant field.
• 5+ years of hands‑on experience in Identity & Access Management within enterprise environments.
• Strong expertise in Entra ID (Azure AD), on‑premises Active Directory, Conditional Access, MFA, SSO, PIM, and RBAC.
• Experience supporting Microsoft 365 / Exchange Online.
• Proficiency with PowerShell scripting for automation.
• Solid understanding of Zero Trust, identity governance, and email security best practices.
• Familiarity with Microsoft security/compliance tools and experience implementing AI‑assisted IT operations (Copilot or similar).
• Relevant certifications (Azure, Microsoft 365, Security) preferred.

Responsibilities

• Identity & Access Management: Administer Entra ID and Active Directory, including hybrid sync.
• Design, implement, and troubleshoot SSO integrations using SAML, OIDC, and OAuth.
• Manage Enterprise Applications in Entra ID, onboarding and lifecycle governance.
• Configure MFA, Conditional Access, Identity Protection, and risk-based controls.
• Oversee PIM, just-in-time access, and RBAC following least-privilege.
• Troubleshoot authentication, federation, and directory sync issues.
• Apply Zero Trust across identity systems and support access reviews.

Skills

Identity & Access Management

Entra ID (Azure AD)

SSO & MFA

RBAC & PIM

PowerShell scripting

Zero Trust concepts

Education

Bachelor’s degree in a relevant field

Tools

Azure AD

Microsoft 365 / Exchange Online

SAML / OIDC / OAuth

Job description

Job details

Growing company looking for their next IAM leader

This Jobot Job is hosted by: Adam Bennett

Salary: $140,000 - $160,000 per year

A bit about us

We are a global leader in real estate investment, development, and property management, recognized for our forward-thinking approach and consistent delivery of exceptional results. With a rich history spanning decades, our organization has built a reputation for blending creativity with operational excellence. We’ve earned accolades as one of the most innovative companies in our sector and as a top workplace, thanks to our commitment to cutting-edge solutions and a people-first culture. Our teams thrive in an environment that values bold ideas, continuous learning, and the use of advanced technology to drive efficiency and long-term success.

Why join us

Joining our team means becoming part of a dynamic organization where your contributions directly impact enterprise-wide technology strategy and security posture. You’ll work alongside industry leaders who prioritize innovation, professional growth, and work-life balance. We offer:

• Opportunities to lead transformative initiatives in a complex, hybrid enterprise environment
• Access to the latest MS technologies and AI-powered tools to streamline your work
• A collaborative culture that encourages cross-functional partnerships and knowledge sharing
• Competitive compensation, comprehensive benefits, and meaningful recognition for your expertise
• The chance to solve challenging problems at scale while helping shape the future of identity and access management in a global organization

Here, your ideas matter, and you’ll have the autonomy to implement intelligent automation and modern solutions that enhance security and user experience.

Core Responsibilities

• Identity & Access Management
• Administer and optimize Entra ID and Active Directory environments, including hybrid synchronization.
• Design, implement, and troubleshoot Single Sign-On (SSO) integrations using SAML, OIDC, and OAuth for internal and third-party applications.
• Manage Enterprise Applications in Entra ID, handling onboarding, access provisioning, and lifecycle governance.
• Configure and enforce Multi-Factor Authentication (MFA), Conditional Access policies, Identity Protection, and risk-based controls.
• Oversee Privileged Identity Management (PIM), just-in-time access, and privileged access governance.
• Implement and manage identity lifecycle processes (joiner/mover/leaver) and role-based access control (RBAC) following least-privilege principles.
• Troubleshoot complex authentication, federation, and directory synchronization issues.
• Apply Zero Trust principles across identity systems and support access reviews and certification processes.

Messaging & Email Infrastructure (Secondary Focus)

• Support Microsoft 365 Exchange Online environments, including mail flow troubleshooting.
• Maintain knowledge of email security standards (SPF, DKIM, DMARC) and related gateway solutions.

AI-First Operations & Automation

• Leverage Microsoft Copilot and other AI tools for accelerated troubleshooting, anomaly detection, and root cause analysis.
• Develop automation solutions using PowerShell, workflows, and orchestration tools to reduce manual tasks.
• Identify and implement AI-enhanced capabilities across identity, security, and messaging operations.
• Stay current with emerging Microsoft AI and security features and translate them into practical improvements.

Documentation & Collaboration

• Create and maintain technical documentation, architecture diagrams (using Visio or equivalent), and operational runbooks.
• Partner closely with security, infrastructure, application, and compliance teams.
• Participate in on-call rotation and drive continuous improvement initiatives.

Minimum Qualifications

• Bachelor’s degree in a relevant field.
• 5+ years of hands‑on experience in Identity & Access Management within enterprise environments.
• Strong expertise in Entra ID (Azure AD), on‑premises Active Directory, Conditional Access, MFA, SSO, PIM, and RBAC.
• Experience supporting Microsoft 365 / Exchange Online.
• Proficiency with PowerShell scripting for automation.
• Solid understanding of Zero Trust, identity governance, and email security best practices.
• Familiarity with Microsoft security/compliance tools and experience implementing AI‑assisted IT operations (Copilot or similar).
• Relevant certifications (Azure, Microsoft 365, Security) preferred.

Jobot is an Equal Opportunity Employer. We provide an inclusive work environment that celebrates diversity and all qualified candidates receive consideration for employment without regard to race, color, sex, sexual orientation, gender identity, religion, national origin, age (40 and over), disability, military status, genetic information or any other basis protected by applicable federal, state, or local laws. Jobot also prohibits harassment of applicants or employees based on any of these protected categories. It is Jobot’s policy to comply with all applicable federal, state and local laws respecting consideration of unemployment status in making hiring decisions.

Sometimes Jobot is required to perform background checks with your authorization. Jobot will consider qualified candidates with criminal histories in a manner consistent with any applicable federal, state, or local law regarding criminal backgrounds, including but not limited to the Los Angeles Fair Chance Initiative for Hiring and the San Francisco Fair Chance Ordinance.

Information collected and processed as part of your Jobot candidate profile, and any job applications, resumes, or other information you choose to submit is subject to Jobot's Privacy Policy, as well as the Jobot California Worker Privacy Notice and Jobot Notice Regarding Automated Employment Decision Tools which are available at jobot.com/legal.

By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Jobot, and/or its agents and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy here: jobot.com/privacy-policy