Infrastructure Engineer

Huxley; Boston (MA); On-site; USD 120,000 - 150,000; Full time

Job summary

A leading identity management solutions provider is seeking a Senior IAM Engineer based in Boston, MA. This senior-level role involves designing and implementing enterprise identity and access management capabilities, specifically focusing on Entra ID, SSO, and MFA. The ideal candidate has over 5 years of experience in IAM and will be responsible for ensuring secure access to corporate systems. This is a critical role that requires expertise in Conditional Access, identity lifecycle processes, and troubleshooting authentication flows.

Qualifications

• 5+ years of experience in IAM or closely related infrastructure/security roles.
• Proven ability to lead cross-functional initiatives while remaining technically hands-on.

Responsibilities

• Design, implement, and operate IAM solutions aligned to zero trust principles.
• Establish and enforce standards for SSO, MFA, Conditional Access across environments.
• Act as the technical authority for authentication patterns and identity lifecycle processes.

Skills

Expert-level experience administering Entra ID

Strong background implementing SSO and MFA at enterprise scale

Deep experience building and operating Conditional Access policies

Hands-on experience with Zscaler ZPA

Troubleshooting skills across authentication and authorization flows

Education

Bachelor’s degree in computer science or Information Technology

Tools

Microsoft Intune

Microsoft Purview

PowerShell

Job description

This senior-level role is responsible for designing, implementing, and operating enterprise identity and access management (IAM) capabilities. The position serves as the subject‑matter expert for Entra ID, Conditional Access, SSO, MFA, and modern zero-trust access technologies. The engineer will ensure secure access to corporate systems through strong authentication, least-privilege models, and automation-driven identity governance.

Key Responsibilities

Identity & Access Architecture

• Design, implement, and operate IAM solutions aligned to zero trust and risk‑based access principles.
• Establish and enforce standards for SSO, MFA, Conditional Access, and access governance across cloud and on‑prem environments.
• Act as the technical authority for authentication patterns, identity lifecycle processes, and secure access workflows.
• Administer Entra ID, including tenant configuration, access policies, and identity settings.
• Build and maintain Conditional Access policies based on user risk, device posture, and access context.
• Deliver SSO integrations for internal and SaaS applications, including onboarding, testing, deployment, and support.
• Manage Entra ID enterprise applications—govern permissions, assignments, and access models.
• Oversee API permission governance, including Microsoft Graph scoping and consent workflows.
• Administer Zscaler ZPA to provide secure access to private applications, working closely with application teams.

Network & Access Control

• Configure and support Meraki switching and wireless systems, including monitoring and lifecycle management.
• Manage firewall and network access policies using FortiGate, with a focus on identity-centric access.
• Troubleshoot wired, wireless, and remote access connectivity issues in collaboration with security and infrastructure teams.
• Conduct scheduled access reviews and partner with system owners to resolve gaps or policy concerns.
• Participate in cyber and third‑party risk assessments, addressing IAM-related findings.
• Develop and maintain metrics and reporting on platform health, access risks, and improvement areas.
• Maintain procedures, standards, and documentation for IAM operations.
• Act as the primary escalation point for IAM incidents, outages, and related security events.

Required Technical Qualifications

• Expert-level experience administering Entra ID, including identity configuration and policy management.
• Deep experience building and operating Conditional Access policies aligned with least‑privilege and risk‑based models.
• Strong background implementing SSO and MFA at enterprise scale.
• Experience managing Entra ID Enterprise Applications, including permission governance and assignment models.
• Familiarity with governing Microsoft Graph API permissions and consent workflows.
• Hands‑on experience with Zscaler ZPA.
• Working knowledge of OAuth, OpenID Connect, SAML, and LDAP.
• Strong troubleshooting skills across authentication and authorization flows.
• Solid understanding of authentication‑related networking fundamentals

Preferred Qualifications

• Experience with Microsoft Intune.
• Familiarity with Microsoft Purview.
• PowerShell scripting and automation skills.

Requirements

• Bachelor’s degree in computer science, Information Technology, or equivalent practical experience.
• 5+ years of experience in IAM or closely related infrastructure/security roles.
• Proven ability to lead cross‑functional initiatives while remaining technically hands‑on.