IAM Engineer: Entra ID, FIDO2 & Zero Trust

Mindlance; Charlotte (NC); On-site; USD 120,000 - 170,000; Full time

Job summary

Mindlance is seeking an experienced IAM Architect to drive secure access architecture across enterprise environments in Charlotte, NC. You will design and implement enterprise identity patterns, integrate Microsoft Entra, and enforce Zero Trust principles.

The role involves collaborating with cross-functional teams, migrating federated applications, and deploying risk-based access controls including phishing-resistant MFA. Strong leadership and program delivery skills are essential for success.

Qualifications

• Design enterprise IAM architectures and authentication models aligned with security standards.
• Configure Entra ID tenants, trust relationships, entitlement management, and hybrid identity solutions.
• Implement risk-based access controls and CA policies in line with Zero Trust.
• Knowledge of phishing-resistant authentication methods including FIDO2 keys, passkeys, and Windows Hello for Business.
• Migrate federated apps and validate SAML/OIDC/OAuth flows; troubleshoot identity integrations.
• Secure administration with least-privilege models and break-glass access controls.

Responsibilities

• Collaborate with cyber and enterprise architectures to select and design IAM patterns.
• Work with SMEs across IT teams on IAM designs, config, pilot testing, and implementation.
• Coordinate with Project Management to size resources and timelines for IAM deliverables.
• Configure Entra ID identity, trust settings, and entitlement management.
• Implement Conditional Access with phishing-resistant MFA and risk-based controls.
• Migrate federated applications and validate authentication flows; manage IAM key provisioning.
• Support Windows Hello for Business rollouts and step-up authentication for sensitive tasks.
• Identify break-glass accounts and secure privileged access paths according to architecture patterns.
• Validate playbooks, lifecycle models, and deployment expansion.

Skills

IAM Architecture

Entra ID Administration

Zero Trust

FIDO2 / Passkeys

Identity Federation

PAM / Privileged Access

IAM Program Delivery

Microsoft Entra External ID

Job description

Mindlance is seeking an experienced IAM Architect to drive secure access architecture across enterprise environments in Charlotte, NC. You will design and implement enterprise identity patterns, integrate Microsoft Entra, and enforce Zero Trust principles.

The role involves collaborating with cross-functional teams, migrating federated applications, and deploying risk-based access controls including phishing-resistant MFA. Strong leadership and program delivery skills are essential for success.