Senior IAM Engineer - Entra ID

The role

This person will own the design, implementation, and operation of the Microsoft Entra ID environment. They will automate identity monitoring, management, and governance using Microsoft Graph API, Azure Logic Apps, and Azure Functions.

What you will do

• Design, configure, and maintain Microsoft Entra ID including conditional access, identity governance, PIM, and access reviews.
• Own end-to-end identity and access management processes like user lifecycle, RBAC, SSO, and MFA.
• Automate monitoring and management of Entra ID resources using Microsoft Graph API, Azure Logic Apps, and Azure Functions.
• Develop and maintain automation for identity operations using PowerShell and Graph SDK.
• Build event-driven automation to react to identity events in near real time.
• Apply security best practices and compliance standards like Zero Trust and SOC2/ISO 27001.
• Integrate Entra ID with enterprise applications using SAML, OIDC, OAuth2, and SCIM.
• Work across the broader Azure infrastructure stack to ensure identity controls are integrated.
• Build and maintain CI/CD pipelines and infrastructure-as-code for identity configuration changes.
• Monitor, audit, and respond to identity-related security incidents.

Required qualifications

• 7+ years of experience in Identity and Access Management, with strong hands-on expertise in Microsoft Entra ID (Azure AD).
• Proven experience with IAM concepts: RBAC, SSO, MFA, conditional access, PIM, and identity governance.
• Strong background in IT/cloud security, including familiarity with Zero Trust architecture and common compliance frameworks.
• Practical experience automating monitoring, management, and governance of Entra ID resources using Microsoft Graph API, Azure Logic Apps, and Azure Functions.
• Familiarity with related Azure automation/integration services such as Event Grid, Azure Automation Accounts/runbooks, and Key Vault.
• Broad working knowledge of Azure infrastructure in general.
• DevOps experience: CI/CD pipelines, infrastructure-as-code (e.g., Bicep, Terraform, or ARM templates), and version-controlled automation.
• Scripting proficiency in PowerShell and/or the Microsoft Graph SDK.
• Solid understanding of authentication/authorization protocols: SAML, OAuth2, OIDC, SCIM.
• Demonstrated ownership/accountability for a technical domain.
• Strong troubleshooting, documentation, and cross-team collaboration skills.
• Bachelor's or Master's degree in Computer Science, Information Technology, Software/Computer Engineering, or a related engineering discipline (or equivalent practical experience).

Nice to have

• Microsoft certifications such as SC-300 (Identity and Access Administrator) or SC-100 (Cybersecurity Architect).
• Experience with hybrid identity (Entra Connect/Azure AD Connect) and on-prem Active Directory integration.
• Familiarity with Microsoft Sentinel or other SIEM tools for identity threat detection.
• Experience working in a regulated or enterprise SaaS environment.

Benefits

• The opportunity to shape and modernize enterprise identity architecture at scale.
• A collaborative, security-focused team culture with strong engineering practices.
• Ownership of automation and DevOps initiatives within the IAM domain.

About the company

RELEX is looking for a Senior IAM Engineer to join their Identity & Access Management (IAM) and Security team.