IdentITy and Access Management Engineer

Role & responsibilities

• Design, implement, and support both on-premises Active Directory and Azure AD services for SSO, multifactor authentication, Zero Trust, user access provisioning services, automation, integrations, and lifecycle management, collaborate with IT and product teams for SSO and user registration.
• Provision, configure & support resilient cloud deployment architecture, maintaining SOC2 compliance.
• Take the lead in managing and enhancing system scalability and capacity, ensuring service remains online and performing optimally. Be at the forefront of maintaining the balance between business necessities and product demands, by crafting and reviewing operation runbooks .
• Oversee SSO/identity services vendor platforms specifically for multiple SOC2 controlled environments, work with other Identity Platform engineers in deploying and maintaining services.
• Participate in periodic SOC2 audit processes.

Preferred candidate profile

• 6+ years of hands-on experience in designing, managing, implementing, and supporting Microsoft on-premises identity (AD/ADFS/Certificate Services), hybrid, cloud identity, and access technologies and solutions.
• Hands-on experience planning and deploying AAD Identity services including third-party identities, AAD licensing, conditional access policies, MFA, AAD Identity Protection, privileged identity, access management, identity governance administration and hybrid/cloud device management within a complex environment.
• Some experience with Okta, CyberArk, Cloud Access Security Broker services, etc.
• Must be an effective communicator, possess critical-thinking and problem-solving skills, can self-manage tasks, goals, commitments, and work well alone or as a member of the team.