Description

You will establish Microsoft Entra ID as the central control plane for identity governance across Azure, GCP, and on-premises Active Directory environments.

This role is remote.

Responsibilities

• Design and automate end-to-end Joiner, Mover, and Leaver (JML) workflows using Microsoft Entra ID Lifecycle Workflows and custom automation for zero-touch provisioning.
• Implement Identity as Code by managing RBAC, Conditional Access policies, and PIM configurations using Terraform and version control.
• Engineer modern access controls including Privileged Identity Management (PIM), Just-in-Time (JIT) access, and Workload Identity Federation.
• Develop production-quality automation tools using Python, Go, or PowerShell to interact with the Microsoft Graph API for complex identity tasks.
• Partner with security and engineering teams to ensure automated access activities are logged, monitored, and audited.

Required Skills

• 5+ years of engineering experience with a focus on Identity and Access Management (IAM).
• Deep expertise in Microsoft Entra ID (formerly Azure AD), including Enterprise Applications, App Registrations, and Conditional Access.
• Proven experience writing and managing complex Terraform modules for RBAC assignments and cloud resources.
• Strong coding proficiency in Python, Go, or advanced PowerShell with extensive REST API interaction experience.
• Strong understanding of modern authentication protocols including OIDC, OAuth2, and SAML.
• Bachelor’s degree in Computer Science, Electrical Engineering, Information Systems, or equivalent.

Preferred Skills

• Masters in Computer Science or Microsoft Security/Identity Certifications (SC-300, AZ-500).
• Experience synchronizing identities across multi-cloud environments (Azure and GCP).
• Experience converting legacy Active Directory group-based access into dynamic, attribute-based access controls.

Key Skills

Education

Any Graduate