Enterprise IAM Operations Engineer, Entra ID, RBAC, Application Integration

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

⚙️ Operations

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

New Era Technology

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

New Era Technology is a global technology solutions provider offering a wide range of services and solutions, including cloud services, professional and managed services, cybersecurity, collaboration and unified communications, data networking, digital transformation, and physical security. With a team of engineers, designers, installers, and technicians, New Era Technology collaborates with over 20,000 customers and operates through 80+ offices worldwide. They are recognized as a top integrator for AV and video collaboration and offer industry-specific solutions for sectors such as healthcare, education, government, banking, finance, and retail. New Era Technology aims to help businesses adapt to the rapidly changing digital landscape through innovative technology solutions and customized services.

📋 Description

• Design, maintain, and optimize Azure RBAC across subscriptions, management groups, resource groups, and Azure services • Define enterprise role taxonomy and implement governed access using groups, roles, and approved assignments • Administer Microsoft Entra ID/Azure AD, on-premises Active Directory, hybrid identity, and workforce, partner, guest, service, and application identities • Implement Microsoft Entra PIM, Just-in-Time privileged access, MFA, Conditional Access, break-glass procedures, privileged access monitoring, and audit evidence • Design, implement, and troubleshoot SAML, OIDC, OAuth, Entra SSO, enterprise applications, app registrations, service principals, claims, groups, and application roles • Promote managed identities, govern service principals, support credential rotation, and improve CI/CD secret management • Support the Saviynt-to-SailPoint transition and related identity, entitlement, role, certification, policy, procedure, and control documentation • Support IAM monitoring, logging, alerting, investigation, and ITDR use cases using Azure-native tools and Splunk • Support AWS IAM, GCP IAM, and multi-cloud identity governance where required • Support FedRAMP-relevant access controls, configuration baselines, change control, audit readiness, and privileged access governance • Develop automation and scripting to improve IAM workflows, reporting, documentation, access reviews, runbooks, and operational efficiency • Identify opportunities to use AI tools for IAM analysis, reporting, documentation, and workflow optimization • Collaborate with Information Security, infrastructure, cloud, application, DevOps, audit, and other technical stakeholders

🎯 Requirements

• Hands-on enterprise application federation and SSO experience required • Bachelor’s degree in Information Security, Computer Science, Information Technology, or equivalent practical experience • Strong hands-on experience with Microsoft Entra ID/Azure AD administration • Strong knowledge of Azure RBAC, security groups, role assignments, management groups, subscriptions, and resource-level access • Experience with Microsoft Entra PIM, JIT privileged access, MFA, Conditional Access, and privileged authentication • Strong understanding of Active Directory and hybrid identity • Enterprise experience with SAML, OIDC, OAuth, SSO, Entra Enterprise Applications, app registrations, managed identities, service principals, claims, and application roles • Experience with least-privilege access design, access reviews, access certification, identity/entitlement inventory, credential management, and secret hygiene • Experience with Azure monitoring/logging and Splunk or comparable SIEM platforms • Understanding of Identity Threat Detection and Response (ITDR) • Experience with IAM automation/scripting and CI/CD identity controls • Strong IAM documentation skills, including policies, standards, procedures, runbooks, and audit evidence • Preferred: 7+ years of Identity and Access Management experience • Preferred: 4+ years of Microsoft Entra ID/Azure AD experience • Preferred: 3+ years of Azure RBAC, privileged access, or cloud access governance experience • Financial services, banking, or regulated enterprise experience strongly preferred • Strong understanding and practical implementation of RBAC and least-privilege access at enterprise scale • Strong troubleshooting skills for authentication, federation, SSO, privileged access, and identity monitoring • Ability to work across IAM, Security, Cloud, Infrastructure, Applications, DevOps, and Audit teams • Strong communication, documentation, analytical, and problem-solving skills • Ability to work within change control, audit, compliance, and operational stability environments • Ability to balance security requirements with technical and business needs

🏖️ Benefits

• Continuous training • Competitive benefits • Personal and professional development opportunities • Team-oriented, collaborative and inclusive culture