Senior IAM Engineer: Azure Entra & Cloud Access Governance

Socket.dev; New York (NY); Hybrid; USD 140,000 - 190,000; Full time

Job summary

New Era Technology, LLC. is seeking a Senior IAM Engineer to support enterprise Identity and Access Management operations across a hybrid, multi-cloud environment.

You will manage Azure AD, entitlements, SSO, and privileged access workflows. The ideal candidate will have strong hands-on experience with Microsoft Entra ID/Azure AD, Azure RBAC, PIM, and identity security initiatives, along with automation, ITDR, and Splunk-based monitoring.

Qualifications

• 7+ years of Identity and Access Management experience preferred.

Responsibilities

• Design, maintain, and optimize Azure RBAC across subscriptions, management groups, resource groups, and Azure services.
• Define enterprise role taxonomy and implement governed access using groups, roles, and approved assignments.
• Administer Microsoft Entra ID/Azure AD, on-premises Active Directory, hybrid identity, and workforce, partner, guest, service, and application identities.
• Implement Microsoft Entra PIM, Just-in-Time (JIT) privileged access, MFA, Conditional Access, break-glass procedures, privileged access monitoring, and audit evidence.
• Design, implement, and troubleshoot SAML, OIDC, OAuth, Entra SSO, enterprise applications, app registrations, service principals, claims, groups, and application roles.
• Promote managed identities, govern service principals, support credential rotation, and improve CI/CD secret management.
• Support the Saviynt-to-SailPoint transition, including identity, entitlement, role, certification, policy, procedure, and control documentation.
• Support IAM monitoring, logging, alerting, investigation, and ITDR use cases using Azure-native tools and Splunk.
• Support AWS IAM, GCP IAM, and multi-cloud identity governance where required.
• Support FedRAMP-relevant access controls, configuration baselines, change control, audit readiness, and privileged access governance.
• Develop automation and scripting to improve IAM workflows, reporting, documentation, access reviews, runbooks, and operational efficiency.
• Identify opportunities to responsibly use AI tools for IAM analysis, reporting, documentation, and workflow optimization.
• Collaborate with Information Security, infrastructure, cloud, application, DevOps, audit, and other technical stakeholders.

Skills

Strong communication

Documentation

Analytical thinking

Problem solving

Cross-team collaboration

Education

Bachelor’s degree in Information Security, Computer Science, Information Technology

Tools

Microsoft Entra ID/Azure AD administration

Azure RBAC

Microsoft Entra PIM

JIT privileged access

MFA

Conditional Access

SAML

OIDC

OAuth

Entra SSO

App registrations

Service principals

Claims

Application roles

Azure monitoring

Splunk

ITDR

CI/CD identity controls

Job description

New Era Technology, LLC. is seeking a Senior IAM Engineer to support enterprise Identity and Access Management operations across a hybrid, multi-cloud environment.

You will manage Azure AD, entitlements, SSO, and privileged access workflows. The ideal candidate will have strong hands-on experience with Microsoft Entra ID/Azure AD, Azure RBAC, PIM, and identity security initiatives, along with automation, ITDR, and Splunk-based monitoring.