Identity Access Management Engineer (IT Services)

The role

The Identity Access Management Engineer will design, implement, and support enterprise identity and access management solutions with a focus on the Microsoft Entra platform. This role involves advancing hybrid cloud strategy through identity platform standardization and automation-first workflows.

What you will do

• Design, implement, and maintain enterprise identity solutions across Microsoft Entra ID, Active Directory, and hybrid identity environments
• Architect secure authentication and authorization services leveraging Entra ID, Conditional Access, Identity Protection, MFA, and PIM
• Develop and maintain automation solutions using PowerShell, Azure rest APIs, Graph, and JWT tokens
• Automate identity provisioning, deprovisioning, access certification, credential rotation, and governance processes
• Create integrations with enterprise systems to improve identity operations
• Provide operational support for Microsoft Entra and Active Directory services
• Monitor, troubleshoot, and resolve complex identity, authentication, synchronization, and access-related issues
• Collaborate with Cloud, Infrastructure, Security, and Application teams to onboard and secure enterprise applications
• Establish and maintain identity security standards, operational procedures, and access control policies
• Support audit, compliance, and regulatory requirements through identity governance and privileged access controls

Required qualifications

• Bachelor's degree in Computer Science, Information Systems or related discipline
• 8-10 years of prior hands-on professional experience with the most recent years as an IAM Engineer
• Proven experience in designing, deploying, and managing an enterprise PAM environment with specialized knowledge related to Thycotic, CyberArk, or Microsoft privileged access solutions
• Automated identity lifecycle processes using PowerShell, Microsoft Graph API, Azure Automation, Logic Apps, or related automation platforms
• Implemented and supported Microsoft Entra ID, Entra ID Governance, Privileged Identity Management (PIM), and Conditional Access policies in enterprise-scale environments
• Hands-on experience with hybrid identity architectures, including Active Directory Domain Services (AD DS), Entra Connect, Cloud Sync, and federated authentication services
• Experience implementing and managing Single Sign-On (SSO) integrations using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM
• Demonstrated ability in removing standing privilege by leveraging just-in-time access or other dynamic elevation models
• Hands-on experience with cloud migrations while managing complex hybrid Active Directory environments
• Knowledge of regulatory and security frameworks including NIST, CIS Controls, ISO 27001, and Zero Trust security standards
• Must be comfortable in customer-facing scenarios and effectively collaborating in cross-functional technical teams
• Self-motivated, with a strong ability to prioritize and execute tasks in a high-pressure environment

Nice to have

• Master's degree
• Experience with VMware Cloud Foundation (VCF), vSphere, and hybrid cloud architectures
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Azure Solutions Architect Expert (AZ-305), or related Cloud Identity certifications
• Experience with Identity Threat Detection and Response (ITDR), identity security monitoring, and integrations with Microsoft Defender and Microsoft Sentinel
• Experience integrating AIOps, observability, or monitoring platforms

Benefits

• Medical, dental, and vision insurance
• 401(k) retirement plan with employer match
• Life and disability insurance
• Paid time off (vacation, sick leave, holidays)
• Paid parental leave
• Wellness programs and employee assistance resources
• Commuter benefits
• Skills development programs including technical training, presentation skills, internal seminars, and career mentoring
• In-house immigration support for foreign nationals and international business travelers

Before you apply

• Include resume with current address, personal email and telephone number

About the company

Charles River Associates is a leading global consulting firm that provides economic, financial, and business management expertise to major law firms, corporations and governments around the world.