Designing, deploying and managing enterprise IAM solutions including identity lifecycle management, SSO, MFA, PAM, and directory services
Engineering and maintaining Privileged Identity Management (PIM) and Privileged Access Management (PAM) platforms
Integrating IAM systems with Microsoft 365 and third-party applications using SAML, OIDC, SCIM, and LDAP
Implementing and enforcing RBAC, ABAC, and just-in-time (JIT) provisioning
Designing and managing Microsoft Entra ID, Conditional Access, Intune, and Microsoft 365 Defender policies
Developing automation and reporting using PowerShell, Microsoft Graph API, and security tooling

Bachelor’s degree in information technology, Cybersecurity, or related field OR 8 years of relevant experience as an equivalent
At least 7 years of experience in cybersecurity or IT infrastructure roles
At least 5 years focused on IAM implementations
Experience with Microsoft Entra ID, Conditional Access, Intune, and M365 Defender
Proficiency in PowerShell, KQL, or Python
Candidates must currently live within a commutable distance to Lombard, IL or Alsip, IL and willing to work onsite 1-2 days per week
Candidates must currently possess unrestricted authorization to work in the United States. Work visa sponsorship is not available for this role.

Global IT Security Engineer

Key skills