Job Description

 

Role Overview:  

We are seeking a highly skilled Cloud IAM (Entra/Azure) Senior Engineer to design, implement, and manage Identity and Access Management (IAM) solutions within Microsoft Entra ID (formerly Azure AD). The ideal candidate will have extensive experience in cloud IAM technologies, security best practices, and integration with enterprise applications.  

 

Key Responsibilities:   

IAM Design & Implementation:  

 Architect, configure, and manage Microsoft Entra ID (Azure AD) for authentication, authorization, and identity governance.  

 Implement Conditional Access Policies, MultiFactor Authentication (MFA), and Privileged Identity Management (PIM) to enhance security.  

 Develop and enforce rolebased access control (RBAC) and least privilege principles for cloud and hybrid environments.  

 Good to know, SSO (Single SignOn) integrations with SaaS, PaaS, and onprem applications using SAML, OAuth, and OpenID Connect.  

 

Security & Compliance:  

 Monitor IAM security posture, detect threats, and implement remediation strategies.  

 Ensure IAM solutions comply with industry standards (ISO 27001, NIST, CIS Benchmarks, etc.).  

 Conduct IAM audits, access reviews, and compliance reporting.  

 

Automation & Integration:  

 Develop PowerShell scripts, Azure Logic Apps, and APIs to automate IAM processes such as user provisioning, deprovisioning, and access management.  

 Integrate IAM solutions with Microsoft Defender, Sentinel, and thirdparty security tools.  

 

͏

Operations & Support:  

 Troubleshoot IAMrelated issues, provide L3 support, and collaborate with crossfunctional teams.  

 Optimize IAM workflows to improve efficiency and security.  

  

Required Skills & Qualifications:  

  5+ years of experience in Identity & Access Management, focusing on Microsoft Entra ID (Azure AD).  

 Deep expertise in Azure IAM services, including Conditional Access, PIM, Identity Protection, and B2B/B2C authentication.  

 Strong understanding of authentication protocols (SAML, OAuth, OpenID Connect, Kerberos, LDAP).  

 Experience with PowerShell scripting for automation and IAM management.  

 Handson experience integrating IAM with Microsoft 365, Azure, and hybrid Active Directory environments.  

 Knowledge of Zero Trust principles and security frameworks (NIST, CIS, etc.).  

 Familiarity with SIEM solutions (Microsoft Sentinel, Splunk, etc.) for identity threat detection.  

  

Preferred Qualifications:  

 Azure certifications (AZ500, SC300, MS102).  

 Experience working in enterprise IAM projects and cloud migrations.  

͏

Deliver

No.	Performance Parameter	Measure
1.	Customer centricity	Timely security breach solutioning to end users, Internal stakeholders & external customers experience
2.	Process Adherence	Adherence to SLA’s (90-95%), response time and resolution time TAT

͏

͏