Remote Azure IAM Engineer — Entra ID, SSO & MFA Expert

Piper Companies; Durham (NC); Remote; USD 115,000 - 135,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k)

Paid time off

Job summary

Piper Companies is seeking an Azure IAM Engineer to design, implement, and maintain enterprise identity and access management in a modern Azure environment. The role is largely remote with a preference for candidates in the Raleigh/Durham, NC area who can attend occasional onsite meetings and collaborate with stakeholders as needed.

Responsibilities include configuring SSO, MFA, RBAC/ABAC, and identity federation, plus troubleshooting authentication issues across cloud/hybrid environments.

Qualifications

• 4+ years of IAM engineering or admin experience.
• Experience with Azure Entra ID (Azure AD).
• Strong understanding of cloud architectures and identity services.
• Hybrid identity integrations and identity governance familiarity.

Responsibilities

• Design, implement, and support IAM solutions in Azure environments.
• Administer Azure Entra ID including lifecycle management and directory integrations.
• Configure SSO, MFA, and identity federation for entitlements.
• Implement RBAC and ABAC policies across resources.
• Collaborate with security, infra, and application teams on access controls.
• Troubleshoot authentication and authorization issues in cloud/hybrid setups.
• Develop IAM documentation and operational procedures.
• Support audits and compliance initiatives related to identity governance.

Skills

IAM engineering

Troubleshooting

Communication

Education

Microsoft certifications (plus)

Tools

Azure Entra ID / Azure AD

Job description

Piper Companies is seeking an Azure IAM Engineer to design, implement, and maintain enterprise identity and access management in a modern Azure environment. The role is largely remote with a preference for candidates in the Raleigh/Durham, NC area who can attend occasional onsite meetings and collaborate with stakeholders as needed.

Responsibilities include configuring SSO, MFA, RBAC/ABAC, and identity federation, plus troubleshooting authentication issues across cloud/hybrid environments.