IAM Engineer (L2)

Job Responsibilities

• Administer and support Microsoft Active Directory and related identity services.
• Manage Microsoft Entra ID, Azure AD Connect, ADFS, Azure AD B2C, Microsoft Identity Manager (MIM), and Network Policy Server (NPS).
• Configure and maintain identity federation, SSO, MFA, Conditional Access, and authentication services (LDAP, SAML, OAuth, OIDC).
• Manage Enterprise PKI (AD CS), including certificate issuance, renewal, revocation, and lifecycle management.
• Perform user lifecycle administration, RBAC, application onboarding, and identity governance.
• Monitor identity infrastructure health, troubleshoot incidents, and support change, problem, and vulnerability management.
• Maintain operational documentation, audit logs, and produce regular service and security reports.
• Ensure identity platforms comply with Microsoft best practices, security standards, and SLA requirements.

Requirements

• 4–6 years of experience in Identity & Access Management (IAM) operations.
• Hands-on experience with Microsoft Entra ID, Active Directory, Azure AD Connect, ADFS, Microsoft Identity Manager (MIM), and Azure AD B2C.
• Strong knowledge of SSO, MFA, Conditional Access, RBAC, LDAP, SAML, OAuth, and OIDC.
• Experience administering Active Directory Certificate Services (AD CS) / Enterprise PKI.
• Familiarity with Workspace ONE Access and third-party SSO integrations is an advantage.
• Strong troubleshooting, documentation, and communication skills.

Preferred Certifications

• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Microsoft Certified: Azure Administrator Associate (AZ-104)
• Microsoft Certified: Security Operations Analyst (SC-200) (preferred)

Hashtags

#IAM #IdentityAccessManagement #MicrosoftEntra #AzureAD #ADFS #AzureADB2C #ActiveDirectory #PKI #ADCS #SSO #MFA #ConditionalAccess #RBAC #LDAP #SAML #OAuth #OIDC #MIM #AzureADConnect #WindowsServer #CyberSecurity