Senior IAM Entra Engineer

Position: Senior IAM Entra Engineer
Location: Evanston, IL 2 days/week onsite
Duration: 2 Years
Employment Type: Contract-to-Hire (CTH)

Job Summary

We are seeking a Senior IAM Entra Engineer with strong experience in Microsoft Entra ID, Active Directory, Hybrid Identity, Federation, SSO, MFA, Conditional Access, and Identity Security. This role focuses on IAM platform engineering, administration, application integration, security, governance, and operational support across cloud and on-premises environments.

Must-Have Skills

Microsoft Entra ID | Active Directory | Hybrid Identity | Federation | Single Sign-On (SSO) | Multi-Factor Authentication (MFA) | Conditional Access | Identity Security Best Practices | Microsoft Entra Connect / Cloud Sync | Enterprise Application Integration | SAML | OAuth | OpenID Connect | WS-Federation

Key Responsibilities

Entra ID & Hybrid Identity

• Engineer, administer, and support Microsoft Entra ID, including tenant configuration, synchronization, authentication methods, identity protection, and access policies.
• Support hybrid identity environments integrating on-premises Active Directory with Microsoft Entra ID.
• Manage Entra Connect, Cloud Sync, federation, and authentication services.
• Integrate enterprise, SaaS, cloud, and custom applications with Entra ID.
• Support migration from legacy authentication platforms to Microsoft Entra ID.
• Configure SAML, OAuth, OpenID Connect, and WS-Federation integrations.

IAM Operations

• Support IAM platform availability, reliability, security, and performance.
• Participate in 24x7 on-call support and critical incident response.
• Troubleshoot IAM issues, manage tickets, perform RCA, and maintain documentation.
• Support IAM service health monitoring and audit readiness.

Maintenance & Governance

• Plan and execute IAM upgrades, maintenance, and security updates.
• Follow change management, testing, peer review, and release processes.
• Coordinate implementation, rollback, and post-production support activities.
• Work with vendors on escalations and platform optimization.

Best Practices & Leadership

• Maintain IAM architecture, standards, SOPs, and operational runbooks.
• Promote automation through scripting, APIs, and orchestration tools.
• Apply least privilege, separation of duties, privileged access management, and access governance.
• Collaborate with infrastructure, security, and application teams and provide technical guidance.

Preferred Qualifications

• Strong enterprise IAM engineering and administration experience.
• Experience with application authentication, federation, and SSO.
• Strong troubleshooting, communication, and documentation skills.
• Experience with scripting and IAM automation.
• Familiarity with identity governance and privileged access management.

Education

Bachelor s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience.

Additional Requirements

• Ability to work 2 days/week onsite in Evanston, IL.
• Ability to participate in an on-call rotation when required.