Identity & Access Management (IAM)- Senior Engineer - Microsoft Entra

ARK Infotech Spectrum India Pvt. Ltd; Dallas (TX); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

ARK Infotech Spectrum India Pvt. Ltd is seeking a Senior Entra IAM Engineer to design, implement, and secure Microsoft Entra ID-based identity solutions across cloud and on-prem environments in Dallas.

You will work on SSO, MFA, passwordless, CA, RBAC, and federation within a hybrid architecture. You will collaborate with security, cloud and compliance teams to enforce Zero Trust, governance, and identity lifecycle processes while mentoring IAM engineers and driving migrations and incident

Qualifications

• Strong hands-on experience with Microsoft Entra ID / Azure Active Directory.
• Experience with Entra Conditional Access, MFA and passwordless auth.
• Experience designing hybrid identity with Entra Connect / Cloud Sync and on-prem AD.
• Experience with SAML 2.0, OAuth 2.0, OIDC and SCIM provisioning.

Responsibilities

• Design, implement, configure, and support Microsoft Entra ID solutions in complex enterprise environments.
• Engineer identity solutions involving SSO, MFA, passwordless authentication, Conditional Access, RBAC, and federation.
• Design and support hybrid identity environments using Entra Connect / Cloud Sync and on-premises Active Directory.
• Integrate SaaS and enterprise apps with Entra ID using SAML 2.0, OAuth 2.0, OIDC, and SCIM.
• Implement Entra ID Governance including access reviews and entitlement management.
• Develop and maintain Conditional Access policies and Privileged Identity Management (PIM).
• Automate IAM administration using PowerShell, Graph API, REST APIs, or infrastructure-as-code.
• Lead or mentor junior IAM engineers and provide senior technical support for migrations and incidents.

Skills

Entra ID / Azure AD

MFA

PIM

Conditional Access

SAML / OAuth / OIDC

SCIM provisioning

PowerShell

Microsoft Graph API

Hybrid identity

RBAC

Zero Trust

Identity lifecycle

Tools

PowerShell

Microsoft Graph API

REST APIs

Entra Connect

Job description

Role : Senior Engineer - Microsoft Entra / Identity & Access Management (IAM)

Location : Dallas, TX ( Hybrid onsite working)

Locals preferred

Role Summary

The Senior Entra IAM Engineer is responsible for designing, implementing, securing, and supporting enterprise identity and access management solutions using Microsoft Entra ID (formerly Azure Active Directory) and related Microsoft identity technologies. The role serves as a senior technical resource for identity architecture, authentication, authorization, privileged access, application integration, and identity governance across cloud and hybrid environments.

The engineer works closely with cybersecurity, cloud/platform, infrastructure, application, and compliance teams to implement secure, scalable IAM solutions aligned with Zero Trust principles and organizational security requirements.

Key Responsibilities

• Design, implement, configure, and support Microsoft Entra ID solutions in complex enterprise environments.
• Engineer identity solutions involving SSO, MFA, passwordless authentication, Conditional Access, RBAC, and federation.
• Design and support hybrid identity environments using Entra Connect / Cloud Sync and on-premises Active Directory.
• Integrate SaaS, cloud, and enterprise applications with Entra ID using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM.
• Implement and manage Entra ID Governance, including access reviews, entitlement management, lifecycle workflows, and identity lifecycle processes.
• Design and administer Privileged Identity Management (PIM) and privileged-access controls.
• Develop and maintain Conditional Access policies based on user, device, application, location, authentication strength, and risk.
• Support Entra ID Protection, identity risk detection, remediation, and security monitoring.
• Engineer identity lifecycle processes covering joiner, mover, and leaver (JML) scenarios.
• Troubleshoot complex authentication, authorization, federation, provisioning, synchronization, and application-access issues.
• Automate IAM administration and operational processes using PowerShell, Microsoft Graph API, REST APIs, and/or infrastructure-as-code approaches.
• Analyze sign-in, audit, provisioning, and security logs to identify and resolve identity-related incidents.
• Partner with security teams to implement Zero Trust and least-privilege access models.
• Develop technical designs, implementation plans, operational procedures, and engineering documentation.
• Participate in architecture and security reviews for applications requiring identity integration.
• Provide technical leadership and mentorship to junior and mid-level IAM engineers.
• Lead or provide senior technical support for IAM migrations, modernization initiatives, and production incidents.

Required Technical Skills

Strong hands-on experience should include:

• Microsoft Entra ID / Azure Active Directory
• Entra Conditional Access
• Multi-Factor Authentication (MFA)
• Passwordless authentication / FIDO2 / Windows Hello for Business
• Entra Privileged Identity Management (PIM)
• Entra ID Governance
• Entra ID Protection
• Enterprise Applications and App Registrations
• SSO and federation
• SAML 2.0, OAuth 2.0 and OpenID Connect
• SCIM provisioning
• Active Directory and hybrid identity
• Entra Connect / Cloud Sync
• Microsoft Graph API
• PowerShell automation
• RBAC and least-privilege access models
• Identity lifecycle management
• Authentication and provisioning troubleshooting
• Identity/security logging and monitoring

Preferred Experience

• Approximately 5--8 years of IAM or identity engineering experience, with significant hands-on Microsoft Entra experience.
• Experience supporting large-scale enterprise or multi-tenant environments.
• Experience migrating applications from legacy authentication/federation platforms to Entra ID.
• Understanding of Zero Trust architecture and identity-centric security.
• Experience integrating Entra with Microsoft 365, Azure, endpoint/device-management platforms, SIEM/SOC tooling, and third-party SaaS applications.
• Familiarity with broader IAM platforms such as SailPoint, Saviynt, Okta, CyberArk, Ping Identity, or similar technologies is beneficial.
• Experience operating within security and regulatory frameworks such as NIST, ISO 27001, SOC 2, PCI DSS, or similar environments.

Preferred Certifications

Relevant certifications may include Microsoft Certified: Identity and Access Administrator Associate (SC-300), Microsoft security certifications such as SC-100, Azure certifications, CISSP, or equivalent IAM/security credentials.