Senior IAM & Authentication Engineer

HKA Enterprises; Greenville (SC); Hybrid; USD 69,000 - 95,000; Full time

Job summary

HKA Enterprises is seeking an experienced IT Authentication Architect to support enterprise authentication and identity security systems. You will focus on MFA, IAM, passwordless authentication, and credential management, providing Level 3 technical support across cloud-based and on-prem environments.

The ideal candidate has extensive hands-on experience with Microsoft Entra ID, OpenText NetIQ Advanced Authentication, MFA, and related authentication technologies, delivering secure and scalable

Qualifications

• 10+ years of hands-on MFA experience.
• Strong knowledge of IAM, MFA, SSO, access controls and identity administration.
• Experience with L3 support and root-cause analysis.
• Experience with Agile/Scrum environments.

Responsibilities

• Administer and enhance enterprise authentication platforms (MFA, SSO, passwordless).
• Provide Level 3 support for complex authentication and credential issues.
• Troubleshoot authentication failures and coordinate with support teams.
• Support onboarding, offboarding, and access changes.
• Design, implement, and rollout modern authentication strategies.
• Monitor platforms, analyze security events, and develop dashboards.

Skills

MFA expertise

Entra ID

OpenText NetIQ

IAM

SSO

FIDO2/WebAuthn

Passwordless

Root-cause analysis

Education

Bachelor's/Master's in CS/IT

Tools

Microsoft Entra ID

OpenText NetIQ Advanced Authentication

Bitwarden

KeePassXC

Postman

Microsoft Graph API

Job description

$50-$69/hour W-2, depending on experience

Long-term contract | No anticipated end date

Job Category: Information Technology

Work Arrangement: Hybrid - 2 days onsite and 3 days remote per week, subject to change based on business needs.

IMPORTANT: W-2 EMPLOYMENT REQUIREME NT

HKA Enterprises will employ the selected candidate directly through HKA's W-2 payroll.

• W-2 candidates only.
• No Corp-to-Corp (C2C), 1099, or Contract-to-Hire (C2H).
• No third-party recruiters or staffing company submissions.
• Candidates must be authorized to work in the United States and able to work directly through HKA's W-2 payroll without requiring sponsorship or employment authorization support from another employer.

Position Overview

HKA Enterprises is seeking an experienced IT Authentication Architect to support enterprise authentication and identity security systems. This role focuses on the administration, troubleshooting, integration, and continuous improvement of authentication platforms, with an emphasis on Multi-Factor Authentication (MFA), Identity and Access Management (IAM), passwordless authentication, and credential management.

The selected candidate will provide Level 3 technical support for complex authentication issues, serve as a technical subject matter expert, and help implement secure, scalable authentication solutions across cloud-based and on-premises environments.

The ideal candidate has extensive hands-on experience with Microsoft Entra ID, OpenText NetIQ Advanced Authentication, MFA, authentication protocols, and enterprise identity security technologies.

Key Responsibilities

Authentication and Identity Security

• Administer, support, and enhance enterprise authentication platforms, including Microsoft Entra ID and OpenText NetIQ Advanced Authentication.
• Provide Level 3 technical support for complex authentication, authorization, MFA, and credential-related issues.
• Troubleshoot authentication failures, investigate security incidents, perform root-cause analysis, and coordinate with support teams to resolve escalated issues.
• Support user onboarding, offboarding, access changes, entitlement updates, and identity administration.
• Implement, troubleshoot, and support MFA and passwordless authentication technologies.
• Support FIDO2, WebAuthn, passkeys, YubiKey, Windows Hello for Business, mobile push authentication, HOTP, and TOTP.
• Contribute to the design, implementation, and rollout of modern authentication strategies.

Password and Credential Management

• Administer and troubleshoot enterprise password management solutions, including Bitwarden and KeePassXC.
• Support password vaulting, secure credential sharing, access controls, auditing, and governance.
• Promote secure password and credential management practices across technical and business teams.

API Integration, Testing, and Automation

• Develop, test, and troubleshoot APIs and authentication integrations using Postman, REST APIs, Microsoft Graph API, and JSON.
• Assist application teams with authentication and Single Sign-On (SSO) integration requirements.
• Create and maintain technical documentation, test plans, automated test scripts, and operational procedures.
• Perform functional, unit, and integration testing to verify system reliability and security.
• Identify opportunities to automate repetitive administrative and support tasks.

Monitoring, Reporting, and Continuous Improvement

• Monitor authentication platforms for operational performance, system health, and security events.
• Analyze logs and investigate authentication or access-related issues using Splunk, Microsoft security tools, and other monitoring platforms.
• Develop operational dashboards, security reports, KPIs, and trend analyses using tools such as Power BI and Splunk.
• Support security investigations involving identity, authentication, access management, and credential usage.
• Use Microsoft Copilot and other AI-assisted tools to improve documentation, automation, troubleshooting, and operational efficiency.
• Collaborate with security, infrastructure, application teams, and business stakeholders to improve authentication services and the user experience.
• Perform other related duties as assigned.

REQUIRED QUALIFICATIONS AND EXPERIENCE

• 10+ years of hands-on experience enabling, supporting, and troubleshooting Multi-Factor Authentication (MFA).
• 5+ years of experience with Microsoft Entra ID and OpenText NetIQ Advanced Authentication.
• Extensive experience delivering complex MFA projects in large-scale enterprise environments.
• Experience supporting authentication platforms throughout their lifecycle, from planning and implementation through production support and continuous improvement.
• Strong knowledge of IAM, MFA, SSO, access controls, user provisioning, and identity administration.
• Experience providing Level 3 support, troubleshooting complex technical issues, and conducting root-cause analysis.
• Experience with functional testing, test automation, debugging, and technical documentation.
• Experience working in enterprise IT environments using established project delivery methods, preferably Agile/Scrum.
• Understanding of non-functional requirements, including security, scalability, availability, performance, and reliability.

Required Technical Skills

Identity and Authentication

• OpenText NetIQ Advanced Authentication
• MFA, SSO, Conditional Access, and identity governance
• FIDO2, WebAuthn, passkeys, YubiKey, and Windows Hello for Business
• HOTP, TOTP, and mobile push authentication

Password and Credential Management

• Bitwarden and KeePassXC
• Password vaulting and secure credential management
• Credential access controls, auditing, and governance

APIs, Testing, and Automation

• Postman
• REST APIs and Microsoft Graph API
• JSON-based integrations
• Functional, unit, integration, and automated testing

Monitoring and Reporting

• Splunk and log analysis
• Microsoft security monitoring tools
• Power BI dashboards and reporting
• Troubleshooting, root-cause analysis, and operational metrics

Operating Systems and IT Security

• Microsoft Windows and basic Linux/Unix administration
• IT security principles and risk assessment
• Database fundamentals and query languages, such as PostgreSQL or similar technologies

Education

Bachelor's or master's degree in Computer Science, Information Security, Information Technology, or a related technical field.

Preferred Qualifications

• Relevant industry certifications, such as CISSP, SANS/GIAC certifications (e.g., GSEC or GCWN), or Microsoft Certified: Azure Security Engineer Associate.
• Experience supporting global, enterprise-scale authentication environments.
• Experience designing, implementing, and enhancing authentication platforms.
• Experience with cloud environments, including Microsoft Azure and AWS.
• Experience with AI-assisted workflows and operational automation.
• Strong written and verbal communication skills, including the ability to explain complex technical issues to technical and nontechnical stakeholders.
• Hybrid work arrangement: 2 days onsite and 3 days remote per week, subject to change based on business needs.
• Occasional work at additional business locations may be required.
• Requires frequent computer use and extended periods of sitting at a desk.
• Work is performed primarily in a standard office environment.

HKA Enterprises is a global workforce solutions firm. If you are seeking a new career opportunity or project experience, our recruiters will work to understand your qualifications, experience, and personal goals. At HKA, we recognize the importance of matching employee goals with those of the employer. We strive to seek credibility, satisfaction, and endorsement from all our applicants. We invite you to take time and search for your next career experience with us! HKA is an EEO Employer who participates in the US Citizenship and Immigration Services E-Verify Program.

#IAM #IdentityAccessManagement #MFA #MultiFactorAuthentication #Authentication #Cybersecurity #IdentitySecurity #EntraID #AzureAD #NetIQ #OpenText #AdvancedAuthentication #Passwordless #FIDO2 #WebAuthn #Passkeys #SSO #SingleSignOn #ConditionalAccess #YubiKey #IAMArchitect #SecurityArchitect #IdentityArchitect #ITSecurity #InformationSecurity #SecurityEngineering #CloudSecurity #ZeroTrust #Postman #RESTAPI #MicrosoftGraphAPI #Splunk #PowerBI #AuthenticationArchitect #IAMEngineer #MFAEngineer #IdentityManagement #AccessManagement #ITJobs #TechJobs #Hiring