IAM Engineer (REMOTE)

Conexess Group; Livonia (MI); On-site; USD 100,000 - 140,000; Full time

Job summary

Conexess Group is seeking an experienced Identity & Access Management professional to design, implement, and support Microsoft identity solutions in a enterprise environment. The role focuses on Microsoft Entra ID, Conditional Access, and MFA across cloud and on-premises apps.

You will administer Entra ID, implement PIM, manage SSO integrations, and coordinate with security, infrastructure, and application teams on identity initiatives.

Qualifications

• 5+ years in Identity & Access Management.
• Strong experience with Microsoft Entra ID (Azure AD).
• Experience implementing ConditionaI Access, MFA, PIM, SSO, and Enterprise Applications.
• Experience with Entra Connect synchronization and Active Directory administration.
• Knowledge of PKI, certificates, and certificate-based authentication.
• Excellent troubleshooting and problem-solving skills.

Responsibilities

• Design, implement, and support Microsoft identity and access management solutions.
• Administer and support Microsoft Entra ID environments.
• Configure and maintain Conditional Access policies and authentication controls.
• Implement and support Privileged Identity Management (PIM).
• Manage enterprise app integrations using SAML and OIDC.
• Support SSO initiatives across cloud and on-premises apps.
• Administer Entra Connect synchronization between AD and Entra ID.
• Develop MFA strategies and deployments.
• Maintain Active Directory environments (Group Policy, password policies, lockout, hardening).
• Support Windows Hello for Business implementations.
• Administer AppLocker and security baselines.
• Support PKI and certificate infrastructure.
• Implement and maintain certificate-based authentication.
• Troubleshoot identity-related incidents and access issues.

Skills

Identity & Access

Microsoft Entra ID

Azure AD

Conditional Access

PIM

SSO

MFA

Entra Connect

AD Administration

PKI

Job description

• Design, implement, and support Microsoft identity and access management solutions.
• Administer and support Microsoft Entra ID environments.
• Configure and maintain Conditional Access policies and authentication controls.
• Implement and support Privileged Identity Management (PIM).
• Manage enterprise application integrations using SAML and OIDC.
• Support Single Sign-On (SSO) initiatives across cloud and on-premises applications.
• Administer Entra Connect synchronization between Active Directory and Microsoft Entra ID.
• Develop and support multi-factor authentication (MFA) strategies and deployments.
• Maintain and support Active Directory environments, including:
  • Group Policy Management
  • Password policies
  • Account lockout policies
  • Security hardening
• Support Windows Hello for Business implementations.
• Administer application security controls including AppLocker and security baselines.
• Support PKI and certificate infrastructure.
• Implement and maintain certificate-based authentication solutions.
• Troubleshoot identity-related incidents, authentication failures, and access issues.
• Partner with cybersecurity, infrastructure, and application teams on identity initiatives.
• Support identity modernization programs and emerging identity security projects.
  

Key Responsibilities

• Design, implement, and support Microsoft identity and access management solutions.
• Administer and support Microsoft Entra ID environments.
• Configure and maintain Conditional Access policies and authentication controls.
• Implement and support Privileged Identity Management (PIM).
• Manage enterprise application integrations using SAML and OIDC.
• Support Single Sign-On (SSO) initiatives across cloud and on-premises applications.
• Administer Entra Connect synchronization between Active Directory and Microsoft Entra ID.
• Develop and support multi-factor authentication (MFA) strategies and deployments.
• Maintain and support Active Directory environments, including:
  • Group Policy Management
  • Password policies
  • Account lockout policies
  • Security hardening
• Support Windows Hello for Business implementations.
• Administer application security controls including AppLocker and security baselines.
• Support PKI and certificate infrastructure.
• Implement and maintain certificate-based authentication solutions.
• Troubleshoot identity-related incidents, authentication failures, and access issues.
• Partner with cybersecurity, infrastructure, and application teams on identity initiatives.
• Support identity modernization programs and emerging identity security projects.
  

Required Qualifications

• 5+ years of Identity & Access Management experience.
• Strong experience with Microsoft Entra ID (Azure AD).
• Experience implementing and managing:
  • Conditional Access
  • MFA
  • Privileged Identity Management (PIM)
  • SSO integrations
  • Enterprise Applications
  • App Registrations
• Strong Active Directory administration experience.
• Experience with Entra Connect synchronization.
• Working knowledge of PKI, certificates, and certificate-based authentication.
• Experience supporting identity security initiatives and authentication controls.
• Excellent troubleshooting and problem-solving skills.
• Ability to work independently in a fast-paced enterprise environment.
  

Preferred Qualifications

• Experience with phishing-resistant authentication solutions.
• Experience implementing passwordless authentication technologies.
• Experience with Windows Hello for Business.
• Experience supporting workforce identity verification initiatives.
• Familiarity with healthcare environments or regulated industries.
• Knowledge of Zero Trust architecture principles.
• Experience supporting large-scale Microsoft identity transformations.
  

What Success Looks Like

• Rapidly contributes to ongoing IAM engineering initiatives.
• Helps reduce backlog and operational demand on the Identity team.
• Drives successful implementation of Microsoft identity security capabilities.
• Supports workforce identity modernization efforts.
• Provides hands-on engineering expertise across core identity services.