Senior IAM Engineer - Cloud & On-Prem Security

Avantor; Indiana (PA); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Hybrid work options

Job summary

Avantor is seeking a Senior Identity Access Management (IAM) Engineer to lead the design, implementation, and optimization of IAM systems across on-prem, self-hosted, and cloud environments. You will collaborate with Engineering Services teams, Architects, and cloud providers to apply best practices in identity management and authentication, providing Tier 3 global support.

Responsibilities include enhancing IAM tools, enforcing least privilege, and ensuring audits and compliance align with

Qualifications

• 10+ years IT experience focusing on IAM and security solutions.
• 5+ years Tier 3 experience with IAM systems like Active Directory and EntraID implementations and management.
• Proven expertise in Active Directory, Azure AD, LDAP, PKI, SSO, and 2FA systems.
• Hands-on experience with scripting (PowerShell, Python, Java or other) for automation and system integration.

Responsibilities

• Support and enhance IAM tools and services, focusing on secure user privileges, credential management, and access control.
• Strong knowledge of Active Directory and Entra ID (Azure AD) services e.g. – AD Domain Services, Azure AD Connect, GPOs, DHCP, DNS, AD Certificate Services, DFS, MIM, MFA, SSO, etc.
• Strong knowledge of AD Integration, synchronization and federation with Azure, Entra ID (Azure AD), Office 365, Duo, Identity Governance as well as Windows Server OS administration.
• Strong knowledge of Entra ID (Azure AD) Conditional Access Polices.
• Strong knowledge of Active Directory and Entra ID (Azure AD) security best practices that follow NIST, SOX, GDPR, framework.
• Strong experience in Active Directory services demoting and promoting domain controllers.
• Strong troubleshooting experience in Active Directory services and Entra ID (Azure AD) incident and problem management.
• Strong knowledge of developing processes for IAM governance, compliance, and reporting.
• Good knowledge of designing and implementing policies around Delegated Administration for managing Group Policy Objects, Servers, and Devices.
• Good knowledge of cloud technologies, especially AWS would be a plus.
• Good knowledge of PAM technologies, especially CyberArk would be a plus.
• Good knowledge of Identity technologies, especially Saviyant would be a plus.
• Collaborate with IT, security, and compliance teams to design and implement IAM and PAM strategies.
• Act as a subject matter expert on CyberArk and IAM technologies, providing training and mentorship to team members.
• Ensure alignment of IAM solutions with organizational security and compliance requirements.
• Represent the IAM function during audits, assessments, and stakeholder discussions.

Skills

Privileged access management

Least privilege enforcement

Session monitoring

Troubleshooting

Analytical thinking

Communication skills

Project management

Education

Bachelor's degree in Computer Science, Information Systems, or related field

Certifications such as CISSP / AWS / Azure (optional)

Tools

PowerShell

Python

Java

CyberArk

Saviyant

Azure AD Connect

Job description

Avantor is seeking a Senior Identity Access Management (IAM) Engineer to lead the design, implementation, and optimization of IAM systems across on-prem, self-hosted, and cloud environments. You will collaborate with Engineering Services teams, Architects, and cloud providers to apply best practices in identity management and authentication, providing Tier 3 global support.

Responsibilities include enhancing IAM tools, enforcing least privilege, and ensuring audits and compliance align with