Senior Engineer

Milestone Technologies, Inc.; Torrance (CA); On-site; USD 110,000 - 145,000; Full time

Benefits offered by this job

Comprehensive benefits

Job summary

Milestone Technologies, Inc. is seeking a Senior IAM Engineer to own identity design and governance across our enterprise.

You will drive SCIM provisioning, SSO integrations, and role-to-group mappings to automate license and access management using Microsoft Entra ID as the central identity platform. The role emphasizes hands-on IAM with Entra ID, AWS IAM, and enterprise app integrations, including Palantir Foundry and Polarion.

Qualifications

• 5+ years in Identity & Access Management with Entra ID expertise.
• Experience SCIM provisioning between Entra ID and SaaS apps.
• Configuring SSO integrations (SAML/OIDC) for enterprise platforms.
• Mapping roles to Entra ID groups and automating license management.
• Hands-on AWS IAM and identity federation with Entra ID.
• RBAC design, least-privilege, and access governance best practices.
• Troubleshooting IAM, authentication, and provisioning issues.
• Strong communication with stakeholders.

Responsibilities

• Own end-to-end access management strategy and governance.
• Design and implement SCIM provisioning between Entra ID and SaaS apps.
• Configure and maintain SSO integrations across platforms.
• Map Foundry/Polarion roles to Entra groups for automated access.
• Automate license assignment based on group/role attributes.
• Manage AWS IAM roles, policies, and identity federation.
• Implement conditional access and MFA across platforms.
• Conduct access reviews, certifications, and audits.
• Document IAM architecture and SOPs.
• Stay updated on Entra ID and AWS IAM roadmaps.

Skills

IAM

Entra ID

SCIM provisioning

SSO SAML/OIDC

RBAC design

AWS IAM

MFA/CA

Tools

PowerShell

AWS CLI

AWS SDKs

Graph API

Job description

Needs someone who can design/implement SCIM-based user provisioning, and do identity provisioning form API’s

$80.00/hr - USD $105.00/hr.

Must haves:

• 5+ years of hands-on experience in Identity & Access Management, with deep expertise in Microsoft Entra ID (Azure AD).
• Strong experience implementing SCIM-based provisioning/deprovisioning integrations between Entra ID and SaaS applications.
• Strong experience configuring SSO (SAML/OIDC) integrations between Entra ID and enterprise/SaaS platforms.
• Experience mapping application roles and permissions (e.g., Palantir Foundry, Polarion, or similar enterprise platforms) to Entra ID security groups.
• Experience automating license assignment/management based on role, group, or department attributes.
• Hands-on experience with AWS IAM, including roles, policies, and SSO/identity federation between AWS and Entra ID.
• Solid understanding of RBAC design, least-privilege principles, and access governance best practices.

Seeking a Senior IAM Engineer to own the design, integration, and governance of identity and access management across our enterprise, with Microsoft Entra ID as the central identity platform. This role is responsible for provisioning and deprovisioning automation (SCIM), single sign-on (SSO) integrations across SaaS and cloud platforms, and mapping application-specific roles and permissions - including Palantir Foundry and Polarion - to Entra security groups to drive automated, role- and department-based license and access management. The ideal candidate has deep hands-on experience with Entra ID, AWS IAM, and enterprise application integration.

Key Responsibilities

• Own end-to-end access management strategy and governance across the organization, with Microsoft Entra ID as the identity backbone.
• Design and implement SCIM-based user provisioning/deprovisioning integrations between Entra ID and downstream SaaS applications.
• Configure and maintain SSO integrations (SAML/OIDC) between Entra ID and enterprise SaaS platforms, ensuring secure and reliable authentication.
• Design and manage the mapping of Palantir Foundry roles and permissions to Entra ID security groups, enabling automated and auditable access assignment.
• Design and manage the mapping of Polarion roles and permissions to Entra ID groups to automate license assignment and access by role and department.
• Build automated workflows that assign or revoke SaaS licenses based on Entra group membership, role, and department attributes.
• Configure and manage AWS IAM roles, policies, and identity federation, including SSO integration between AWS and Entra ID.
• Implement and maintain conditional access policies, MFA, and least-privilege access controls across integrated platforms.
• Partner with application owners and business stakeholders to define role-based access control (RBAC) models and access request/approval workflows.
• Conduct periodic access reviews, certifications, and audits to ensure compliance with internal governance and regulatory requirements.
• Troubleshoot identity, SSO, and provisioning issues across integrated platforms, and drive root-cause resolution.
• Document IAM architecture, integration patterns, and standard operating procedures for access governance.
• Stay current on Entra ID, AWS IAM, and identity governance roadmap changes, and assess impact on existing integrations.

Required Qualifications

• 5+ years of hands-on experience in Identity & Access Management, with deep expertise in Microsoft Entra ID (Azure AD).
• Strong experience implementing SCIM-based provisioning/deprovisioning integrations between Entra ID and SaaS applications.
• Strong experience configuring SSO (SAML/OIDC) integrations between Entra ID and enterprise/SaaS platforms.
• Experience mapping application roles and permissions (e.g., Palantir Foundry, Polarion, or similar enterprise platforms) to Entra ID security groups.
• Experience automating license assignment/management based on role, group, or department attributes.
• Hands-on experience with AWS IAM, including roles, policies, and SSO/identity federation between AWS and Entra ID.
• Solid understanding of RBAC design, least-privilege principles, and access governance best practices.
• Strong troubleshooting skills across identity, authentication, and provisioning integrations.
• Excellent communication skills, with the ability to work directly with application owners and business stakeholders on access requirements.

Preferred Qualifications

• Experience with Palantir Foundry administration or platform governance.
• Experience with Polarion administration or ALM platform governance.
• Familiarity with identity governance tools (Entra ID Governance, SailPoint, Saviynt, or similar).
• Experience with scripting/automation (PowerShell, Microsoft Graph API, or AWS CLI/SDKs) for identity workflows.
• Microsoft certifications such as SC-300 (Identity and Access Administrator) or AWS Certified Security – Specialty.

The estimated pay range for this position is USD $80.00/hr - USD $105.00/hr. Exact compensation and offers of employment are dependent on job-related knowledge, skills, experience, licenses or certifications, and location. We also offer comprehensive benefits. The Talent Acquisition Partner can share more details about compensation or benefits for the role during the interview process.