Senior IAM Engineer

Cleartech Recruiting; Denver (CO); On-site; USD 120,000 - 180,000; Full time

Job summary

Unknown company in Denver is seeking a hands-on IAM security engineer to strengthen identity programs in a Microsoft/Azure environment. You will own and evolve IAM capabilities across a Microsoft identity ecosystem, implementing MFA, Conditional Access, SSO/federation, and access governance.

The role emphasizes automation with PowerShell and Python, building identity controls and contributing to Zero Trust concepts in a fast-paced, high-ownership setting.

Qualifications

• Hands-on IAM engineering experience (implementation + operations; not purely GRC/SOC).
• Strong experience with Microsoft Entra ID / Azure AD.
• Working knowledge of MFA, Conditional Access, SSO/federation (SAML/OIDC/OAuth), and access controls.
• Scripting/automation skills: PowerShell and/or Python.
• Comfort working in a fast-paced, high-ownership environment.

Responsibilities

• Own and evolve core Identity & Access Management (IAM) capabilities across a Microsoft identity ecosystem.
• Design, implement, and operate identity controls: MFA, Conditional Access, SSO/federation, authorization patterns, and access governance.
• Partner with security leadership and engineering peers to strengthen identity posture and security maturity.
• Build automation/tooling to scale identity operations (PowerShell and/or Python).
• Contribute to security architecture initiatives (e.g., Zero Trust concepts).

Skills

IAM engineering

Microsoft Entra ID / Azure AD

MFA

Conditional Access

SSO/federation

SAML/OIDC/OAuth

Tools

PowerShell

Python

Job description

A financial services / wealth management organization is growing its security engineering function and is hiring a hands-on IAM-first security engineer. This role is focused on improving identity programs in a Microsoft/Azure environment.

What you’ll do

• Own and evolve core Identity & Access Management (IAM) capabilities across a Microsoft identity ecosystem
• Design, implement, and operate identity controls: MFA, Conditional Access, SSO/federation, authorization patterns, and access governance
• Partner with security leadership and engineering peers to strengthen identity posture and security maturity
• Build automation/tooling to scale identity operations (PowerShell and/or Python)
• Contribute to security architecture initiatives (ex: Zero Trust concepts)

Must-haves

• Hands-on IAM engineering experience (implementation + operations; not purely GRC/SOC)
• Strong experience with Microsoft Entra ID / Azure AD
• Working knowledge of MFA, Conditional Access, SSO/federation (SAML/OIDC/OAuth), and access controls
• Scripting/automation skills: PowerShell and/or Python
• Comfort working in a fast-paced, high-ownership environment

Nice-to-haves

• Identity governance / IGA (access reviews, joiner-mover-leaver, lifecycle automation)
• Privileged access concepts (PIM/PAM)
• Exposure to Zero Trust approaches and/or tools (Zscaler-type platforms)