Own and optimize the full identity lifecycle (joiner / mover / leaver) processes
Manage enterprise authentication systems, including MFA and conditional access
Define, implement, and maintain role-based access control (RBAC) models
Administer privileged access management (PIM), ensuring least-privilege operations
Govern and maintain service accounts and non-human identities
Lead design, configuration, and maintenance of federation and SSO integrations
Manage and enforce tenant-level security controls and configuration standards
Coordinate feature rollout management for identity-related services
Partner with Security and Legal teams to ensure identity alignment with data governance policies
Implement and improve license-assignment automation
Drive SKU optimization strategies (E3 vs. E5, workload mapping, cost efficiency)
Manage true-up / true-down cycles for licensing accuracy and financial stewardship
Develop usage analytics and reporting to inform decisions and measure effectiveness
Serve as primary liaison for Microsoft and reseller coordination
Provide technical leadership and mentorship within the IAM domain

7+ years of experience in Identity & Access Management or Enterprise Services engineering
Expertise with Azure AD / Entra ID, Conditional Access, MFA, SSO, and federation technologies
Strong understanding of RBAC, PIM, and identity lifecycle processes
Experience automating licensing, access workflows, and identity provisioning
Deep knowledge of Microsoft 365 tenants, licensing models, and security configurations

Azure Cloud Architect – Part-Time

Key skills