Identity and Access Management (IAM) Expert

Job Title: Identity and Access Management (IAM) Expert Active Directory, Azure AD & Office

365

Job Summary: We are seeking an experienced and knowledgeable Identity and Access

Management (IAM) Expert to join our team. The ideal candidate will have deep expertise in

Active Directory (AD), Azure Active Directory (Azure AD), and Office 365. This role requires not

only a high level of technical expertise but also the ability to support and guide non-expert

team members in resolving IAM-related issues on a daily basis. The IAM expert will be

instrumental in the smooth operation of our identity management systems and will help in

troubleshooting, policy enforcement, and user access management.

Key Responsibilities:

• Provide expert-level guidance on Active Directory (AD) configuration, management,

and troubleshooting.

• Implement, maintain, and support Azure Active Directory (Azure AD) configurations,

including Conditional Access, Identity Protection, and Multi-Factor Authentication

• Administer and configure Office 365 services, including Exchange Online, SharePoint,

Teams, and OneDrive for Business, ensuring proper integration with AD and Azure AD.

• Support the onboarding and offboarding processes for users, ensuring proper

provisioning and de-provisioning of access to all systems.

• Troubleshoot complex IAM-related issues across Active Directory, Azure AD, and Office

365, working with various teams to resolve access issues.

• Provide expert advice on best practices for IAM security, including user authentication,

role-based access control (RBAC), and least privilege access.

• Assist in IAM-related audits and compliance activities, ensuring that systems are

aligned with company policies and regulatory requirements.

• Train and mentor non-expert team members on IAM tools, processes, and

troubleshooting.

• Document IAM policies, procedures, and troubleshooting guides to support internal

knowledge sharing.

• Collaborate with IT, security, and business teams to design and implement IAM

solutions that align with organizational needs.

Required Skills and Qualifications:

• Proven experience working with Active Directory (AD), including group policies,

user/group management, DNS, and replication.

• Strong knowledge of Azure Active Directory (Azure AD), including user provisioning,

conditional access policies, MFA, self-service password reset, and directory

synchronization.

• Experience with Office 365 administration, including Exchange Online, SharePoint

Online, Teams, OneDrive, and other Microsoft 365 applications.

• In-depth understanding of IAM principles such as RBAC (Role-Based Access Control)

least privilege access, and multi-factor authentication.

• Hands-on experience with user lifecycle management, including onboarding,

offboarding, and role changes in both AD and Azure AD.

• Ability to diagnose and resolve complex IAM-related issues across multiple platforms

(AD, Azure AD, Office 365).

• Proficiency in troubleshooting authentication issues, including Kerberos, SSO, SAML,

and OAuth.

• Experience with Azure AD Connect and hybrid identity management solutions.
• Strong understanding of IAM security and compliance, including regulatory frameworks

(e.g., GDPR, HIPAA).

• Experience in scripting and automation (e.g., PowerShell) for IAM tasks.
• Ability to work effectively with cross-functional teams and mentor junior team

members.

• Excellent communication skills, both verbal and written, with the ability to explain

complex concepts to non-technical stakeholders.

Preferred Qualifications:

• Certifications in IAM or Microsoft technologies (e.g., Microsoft Certified: Azure Identity

and Access Administrator Associate, Certified Identity and Access Manager (CIAM),

etc.)

• Familiarity with third-party IAM tools and solutions.
• Experience with Identity Governance and Administration (IGA) solutions.
• Experience working in hybrid cloud environments and integrating on-premise and

cloud-based IAM systems