Description

You will own the administration and security of Azure Identity and Access Management, ensuring least-privilege access and compliance across the cloud environment.

This role is on-site.

Responsibilities

• Administer Microsoft Entra ID, configuring PIM, JIT elevation, and Conditional Access policies for privileged roles.
• Implement and enforce Azure RBAC, custom roles, and Azure Policy across management groups and subscriptions.
• Manage secrets via Azure Key Vault, eliminating static credentials and enforcing secure authenticator standards like FIDO2 and smartcards.
• Monitor identity events using Azure Monitor, Log Analytics (KQL), and Microsoft Sentinel, routing alerts to security teams.
• Author IAM policies, conduct access reviews, and maintain audit evidence for FedRAMP High, NIST SP 800-53, and SOX compliance.

Required Skills

• 8+ years of experience with Microsoft Entra ID (Azure AD), Azure RBAC, and security groups.
• Deep expertise in PIM, JIT workflows, and Conditional Access for privileged roles.
• Strong knowledge of Azure Policy, Management Groups, and Managed Identities.
• Experience with Microsoft Sentinel (SIEM) and identity monitoring/audit compliance.
• Proficiency in Azure Key Vault, Microsoft Graph API, and Azure CLI.
• Familiarity with highly regulated environments (federal/financial services) and NIST SP 800-53 controls.
• Ability to manage MFA with strong authenticators and enforce session configuration norms.

Preferred Skills

• Experience aligning Azure IAM with internal policies and external frameworks like SOX and ISO.
• Exposure to application identity design patterns, service principal least-privilege, and CI/CD secret scanning.
• Microsoft SC-300 or AZ-500 certification.

Referral Bonus: $5,000

Key Skills

Education

Any Graduate