Senior IAM Engineer

Rovust LLC; New York (NY); Hybrid; USD 90,000 - 150,000; Full time

Job summary

An innovative firm is seeking a Senior Engineer II specializing in Identity and Access Management (IAM). This pivotal role involves managing user identities and access to cloud resources, utilizing cutting-edge technologies like Microsoft Entra ID and Okta. The ideal candidate will lead IAM projects, ensuring security and compliance while collaborating with technical teams. This position offers an opportunity to work with dynamic IAM systems, implement advanced access controls, and mentor fellow engineers. Join a forward-thinking team dedicated to delivering exceptional customer-centric solutions in a hybrid work environment.

Qualifications

• Proficiency in IAM technologies including Microsoft Entra ID and Active Directory.
• Experience with SSO, MFA, and Certificate Lifecycle Management.

Responsibilities

• Manage user identities and access using Microsoft Entra ID and Okta.
• Automate IAM practices and monitor sign-in logs for compliance.

Skills

Microsoft Entra ID

Okta

Auth0

Certificate Lifecycle Management

Active Directory

Scripting (PowerShell)

SSO

MFA

Networking services

Education

Relevant education and work experience

Certifications (SC-300, CISSP)

Tools

Microsoft Entra ID

Okta

Auth0

InfoBlox

Job description

Location: Hybrid – 3 days onsite (Delaware, Irvine, Dallas, Iowa, Cincinnati, Chicago) – Available locations

Duration: 6 Months CTH

Responsibilities

We are seeking a dynamic Senior Engineer II – Identity and Access Management (IAM) with a strong background in IAM technologies, including Microsoft Entra ID, Okta, Auth0, Certificate Lifecycle Management (CLM), and Active Directory.

The ideal candidate will actively engage in the planning, architecture, and execution of IAM systems, serving as a pivotal liaison between the organization and key vendors. This role demands a proactive approach to problem resolution, the ability to lead projects, and a commitment to collaborating with project managers and technical teams to deliver customer-centric solutions, including the presentation of design and deployment strategies.

Key Responsibilities

• Manage user identities and access to resources in the cloud using Microsoft Entra ID, including implementing Conditional Access policies, automating user provisioning and de-provisioning, integrating with Microsoft 365, Azure, and other SaaS applications, utilizing Entra ID for SSO and MFA, and monitoring sign-in logs for security and compliance.
• Manage user identities and access with Okta and Auth0, including implementing access policies, automating user provisioning, integrating with applications, utilizing SSO and MFA, and implementing adaptive authentication for enhanced security and compliance.
• Maintain in-depth knowledge of Active Directory Domain Services.
• Handle Certificate Lifecycle Management, including Microsoft PKI management.
• Manage networking services including InfoBlox for DHCP and DNS management.
• Implement Federation, SSO, and MFA technologies.
• Automate IAM practices using scripting (PowerShell).
• Monitor and analyze sign-in logs for security and compliance.
• Understand and communicate access control mechanisms for REST APIs.
• Conduct research on emerging products, services, protocols, and standards to support systems software procurement and development.
• Participate in incident, problem, and change management following best practices.
• Communicate effectively across technical teams and mentor team members in key skills.
• Adhere to ITIL standards for incident, request, and change management.

Qualifications

• Proficiency in Microsoft Entra ID suite.
• Experience with Okta and Auth0.
• Proficiency in Certificate Lifecycle Management, including Microsoft PKI.
• Proficiency in Active Directory Domain Services.
• Proficiency in networking services, including InfoBlox for DHCP, DNS, and IPAM management.
• Strong understanding of SSO, SAML, OAuth/OIDC, Conditional Access, MFA, RBAC, and fine-grained authorization.
• Relevant education and work experience.
• Certifications such as Microsoft Certified: Identity and Access Administrator Associate (SC-300), CISSP are highly preferred.