IAM Operations Engineer (Contract)

Key Responsibilities

• Operate and administer enterprise IAM platforms, including Microsoft Entra ID, Active Directory and LDAP.

• Manage and enforce MFA, Conditional Access, SSO and authentication policies for users, privileged accounts and remote access.

• Support SAML/OIDC-based SSO and application integrations across enterprise applications.

• Execute Joiner-Mover-Leaver (JML) processes, including user provisioning, access changes and deprovisioning.

• Manage privileged access using PAM, PIM and Just-in-Time (JIT) access controls.

• Conduct access reviews, access recertification and entitlement reviews to ensure least-privilege access.

• Monitor identity and access activities, investigate abnormal access and support IAM-related incident response.

• Maintain IAM security controls in alignment with Zero Trust, access governance and regulatory requirements.

• Identify opportunities for automation and process improvement using PowerShell/Python.

• Work with Security, Infrastructure, Application and IT teams to resolve IAM issues and improve operational effectiveness.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Information Security or related field.
• 5+ years of experience in IAM, Identity Security or Information Security; 7+ years preferred.
• Hands-on experience administering Microsoft Entra ID (Azure AD), Active Directory and/or LDAP.
• Strong experience with MFA, SSO, Conditional Access and authentication technologies.
• Practical experience with SAML, OIDC and identity federation.
• Experience with PAM, PIM and Just-in-Time (JIT) privileged access.
• Hands-on experience with Joiner-Mover-Leaver (JML), access provisioning/deprovisioning and access reviews.
• Strong understanding of authentication, authorization, federation, RBAC and least-privilege access.
• Understanding of Zero Trust and Identity Access Governance.
• Experience with PowerShell or Python scripting/automation is preferred.
• Experience integrating IAM with cloud and SaaS applications is preferred.
• Knowledge of compliance and security frameworks such as PCI DSS and ISO 27001 is preferred.
• Strong troubleshooting, analytical and communication skills.