Identity & Access Management Engineer (IAM Platform Engineer)

Position Summary:

We are in search of a Platform Operations Engineer to develop, implement, manage, and enhance our Identity and Access Management (IAM) capabilities.

Key Responsibilities

• Design, implement, configure, and oversee IAM solutions throughout the organization.
• Manage and configure identity brokering and federation technologies, including Active Directory, AD FS, PKI, and Microsoft Entra ID.
• Implement and oversee authentication and authorization protocols such as Kerberos, SAML, OAuth, and OpenID Connect.
• Utilize Microsoft Graph API to facilitate identity administration, integration, and automation efforts.
• Create and maintain scripts, tools, and automation processes using PowerShell, Python, or similar technologies to minimize manual tasks and operational burdens.
• Develop and sustain platform and deployment automation through scripting, configuration management, and CI/CD methodologies.
• Incorporate DevSecOps principles into platform, identity, and security automation activities.
• Assist with daily platform operations, troubleshoot incidents, and resolve issues related to IAM and platform functionality.
• Ensure that identity platforms are secure, resilient, governed, and compliant with relevant standards.
• Contribute to monitoring, documentation, testing, change management, and operational readiness initiatives.
• Collaborate closely with internal teams, vendors, and technology partners to execute identity and automation projects and address technical challenges.
• Effectively communicate technical concepts to both technical and non-technical audiences.
• Encourage knowledge sharing and foster a collaborative team atmosphere.
• Participate in on-call duties, incident response, and operational support as necessary.

Qualifications

• A minimum of 4 years of experience in IAM, platform engineering, automation, or a related discipline.
• Proven experience with Active Directory, LDAP, AD FS, and Microsoft Entra ID.
• Strong knowledge of SAML, OAuth, and OpenID Connect; familiarity with Kerberos is beneficial.
• Experience utilizing Microsoft Graph API for identity management, integration, or automation purposes.
• Proficient in PowerShell, Python, or comparable scripting languages.
• Understanding of identity governance, access management, and compliance standards.
• Excellent troubleshooting, analytical, and problem-solving abilities.
• Certifications such as the Microsoft Certified: Identity and Access Administrator Associate, Microsoft Certified: Azure Security Engineer Associate, or relevant AWS or DevOps certifications are advantageous.
• A degree in Computer Science, Computer Engineering, Information Technology, Engineering, or a related field, or equivalent relevant experience.