Azure IAM Engineer (Microsoft Entra ID)

Azure IAM Engineer (Microsoft Entra ID)

Experience:

• 6–8 years

Essential Skills:

• More than 5 years of IAM experience, with 3+ years in Microsoft Azure / Entra ID.

• Deep knowledge of:

• Azure RBAC

• PIM

• Conditional Access

• Entra ID roles

Experience with:

• MFA enforcement

• Authentication methods

• Access policies

• Understanding of:

• Identity lifecycle management

• Access certification processes

• Familiarity with:

• Microsoft Defender for Cloud

• Secure Score recommendations

• Experience with ServiceNow or ticketing system integrations for IAM workflows.

• Microsoft Certified - Identity and Access Administrator (SC-300) preferred.

• Strong documentation and stakeholder communication skills.

Role Descriptions:

• Design and implement Azure Entra ID (formerly Azure AD) identity governance frameworks.

• Configure and manage Privileged Identity Management (PIM) for just-in-time privileged access.

• Implement and enforce:

• Conditional Access policies

• MFA

• Phishing-resistant authentication:

• FIDO2

• Passkeys

• Manage RBAC role assignments across:

• Azure subscriptions

• Resource groups

• Management groups

• Remediate:

• Guest user accounts

• Stale identities

• Excessive permission assignments

• Configure and maintain Break Glass (emergency access) accounts with monitoring and alerting.

• Integrate Microsoft Defender for Cloud governance rules with ServiceNow for ticketing workflows.

• Support cross-cloud IAM alignment across:

• AWS IAM

• OCI IAM

• Participate in:

• IAM audits

• Access reviews

• Compliance reporting

• Develop:

• IAM runbooks

• RBAC mapping documentation

• Onboarding guides

Nice to Have:

• Experience with:

• AWS IAM

• AWS Organizations

• SCPs

• Knowledge of:

• OCI IAM compartments

• Policy structures

• Exposure to:

• SASE

• Zero Trust Network Access (ZTNA) frameworks.