IAM Engineer (L2)
Job Responsibilities
- Administer and support Microsoft Active Directory and related identity services.
- Manage Microsoft Entra ID, Azure AD Connect, ADFS, Azure AD B2C, Microsoft Identity Manager (MIM), and Network Policy Server (NPS).
- Configure and maintain identity federation, SSO, MFA, Conditional Access, and authentication services (LDAP, SAML, OAuth, OIDC).
- Manage Enterprise PKI (AD CS), including certificate issuance, renewal, revocation, and lifecycle management.
- Perform user lifecycle administration, RBAC, application onboarding, and identity governance.
- Monitor identity infrastructure health, troubleshoot incidents, and support change, problem, and vulnerability management.
- Maintain operational documentation, audit logs, and produce regular service and security reports.
- Ensure identity platforms comply with Microsoft best practices, security standards, and SLA requirements.
Requirements
- 4–6 years of experience in Identity & Access Management (IAM) operations.
- Hands-on experience with Microsoft Entra ID, Active Directory, Azure AD Connect, ADFS, Microsoft Identity Manager (MIM), and Azure AD B2C.
- Strong knowledge of SSO, MFA, Conditional Access, RBAC, LDAP, SAML, OAuth, and OIDC.
- Experience administering Active Directory Certificate Services (AD CS) / Enterprise PKI.
- Familiarity with Workspace ONE Access and third-party SSO integrations is an advantage.
- Strong troubleshooting, documentation, and communication skills.
Preferred Certifications
- Microsoft Certified: Identity and Access Administrator Associate (SC-300)
- Microsoft Certified: Azure Administrator Associate (AZ-104)
- Microsoft Certified: Security Operations Analyst (SC-200) (preferred)
Hashtags
#IAM #IdentityAccessManagement #MicrosoftEntra #AzureAD #ADFS #AzureADB2C #ActiveDirectory #PKI #ADCS #SSO #MFA #ConditionalAccess #RBAC #LDAP #SAML #OAuth #OIDC #MIM #AzureADConnect #WindowsServer #CyberSecurity