IAM Engineer

Jobgether SRL; United States; Remote; USD 120,000 - 160,000; Full time

Benefits offered by this job

Remote within US

Microsoft identity tech exposure

Identity modernization projects

Cross‑functional collaboration

Security improvements

Job summary

Jobgether SRL is seeking an experienced IAM engineer to design, implement, and support identity and access management across enterprise environments. You will manage Microsoft Entra ID, MFA, PIM, and SSO integrations while ensuring secure authentication controls.

The role includes Entra Connect synchronization, PKI management, and passwordless authentication initiatives in a dynamic, security‑conscious environment.

Qualifications

• 5+ years in Identity and Access Management (IAM).
• Expertise with Microsoft Entra ID and Azure AD.
• Experience implementing Conditional Access, MFA, PIM, SSO integrations, and app registrations.
• Strong Active Directory administration, including GPOs and authentication policies.
• Experience with Entra Connect synchronization and PKI/certificate-based authentication.
• Familiarity with passwordless authentication and phishing-resistant methods.

Responsibilities

• Design, implement, and support IAM across enterprise environments.
• Manage Entra ID environments, CA policies, and authentication controls.
• Implement PIM for privileged access and governance.
• Maintain SSO integrations and app registrations.
• Administer AD, GPOs, and security policies.
• Support Entra Connect synchronization and certificate-based auth.
• Develop MFA strategies and passwordless initiatives.
• Collaborate with cybersecurity, infrastructure, and apps teams.
• Contribute to identity modernization and Zero Trust projects.
• Investigate identity/authentication incidents and resolve issues.

Skills

Entra ID (Azure AD)

Conditional Access

MFA

Privileged Identity Management (PIM)

SSO integrations

Active Directory administration

PKI / certificate management

Identity security initiatives

Troubleshooting identity issues

Zero Trust concepts

Passwordless / phishing-resistant auth

Education

Microsoft certification (e.g., SC-300)

Tools

Entra Connect

Group Policy Management

AppLocker & security baselines

Certificate Services tooling

Job description

Accountabilities:

• - Design, implement, administer, and support Microsoft identity and access management solutions across enterprise environments.
• - Manage Microsoft Entra ID environments, ensuring secure identity provisioning, authentication, and access management.
• - Configure, maintain, and optimize Conditional Access policies and authentication controls to strengthen security.
• - Implement and support Privileged Identity Management (PIM) to manage privileged access and enforce appropriate controls.
• - Manage enterprise application integrations using SAML and OpenID Connect (OIDC).
• - Support Single Sign-On (SSO) initiatives across cloud-based and on-premises applications.
• - Administer Entra Connect synchronization between on-premises Active Directory and Microsoft Entra ID.
• - Develop, implement, and maintain multi-factor authentication (MFA) strategies and deployments.
• - Maintain Active Directory environments, including Group Policy, password policies, account lockout policies, and security hardening.
• - Support Windows Hello for Business implementations and other modern authentication capabilities.
• - Administer application security controls, including AppLocker and security baselines.
• - Support public key infrastructure (PKI), certificate infrastructure, and certificate-based authentication solutions.
• - Investigate and resolve identity-related incidents, authentication failures, access issues, and other technical problems.
• - Collaborate with cybersecurity, infrastructure, and application teams to deliver identity security initiatives.
• - Contribute to identity modernization programs and emerging identity security projects, including workforce identity improvements.
• - Help reduce operational backlogs and support demands by delivering hands-on engineering expertise across core identity services.
• - Support the adoption of advanced identity security capabilities, including passwordless and phishing-resistant authentication where applicable.

Requirements:

• - At least 5 years of experience in Identity and Access Management (IAM).
• - Strong hands-on experience with Microsoft Entra ID, formerly Azure Active Directory.
• - Demonstrated experience implementing and managing Conditional Access, MFA, Privileged Identity Management (PIM), SSO integrations, enterprise applications, and app registrations.
• - Strong Active Directory administration experience, including Group Policy management, account security, and authentication policies.
• - Experience administering and troubleshooting Entra Connect synchronization between Active Directory and Microsoft Entra ID.
• - Working knowledge of PKI, digital certificates, certificate management, and certificate-based authentication.
• - Experience supporting identity security initiatives and enterprise authentication controls.
• - Excellent troubleshooting, analytical, and problem-solving skills, with the ability to investigate complex identity and access issues.
• - Ability to work independently, manage competing priorities, and contribute effectively in a fast-paced enterprise environment.
• - Experience with phishing-resistant authentication solutions is preferred.
• - Familiarity with passwordless authentication technologies is an advantage.
• - Experience implementing or supporting Windows Hello for Business is preferred.
• - Experience supporting workforce identity verification initiatives is beneficial.
• - Familiarity with healthcare environments or other regulated industries is an advantage.
• - Knowledge of Zero Trust architecture principles and identity-centered security practices is preferred.
• - Experience supporting large-scale Microsoft identity transformation and modernization programs is a plus.
• - Strong collaboration and communication skills, with the ability to work effectively across cybersecurity, infrastructure, and application teams.

Benefits:

• - Remote work opportunity within the United States.
• - Opportunity to work with Microsoft Entra ID, Active Directory, and modern enterprise identity security technologies.
• - Hands-on involvement in identity modernization, authentication security, and Zero Trust initiatives.
• - Collaboration with cross-functional cybersecurity, infrastructure, and application teams.
• - Opportunity to contribute to enterprise-wide security improvements and workforce identity transformation.