Job description
The IAM Engineer will work with Microsoft Entra ID (Azure AD), Active Directory, and Single Sign-On (SSO) technologies to enable secure user access and enforce the principle of least privilege across various platforms and applications.
The ideal candidate will have a strong technical background in identity and access management and be able to support and troubleshoot complex IAM-related issues.
ESSENTIAL FUNCTIONS
" IAM Implementation and Administration:
o Assist in designing, configuring, and managing the IAM framework using Microsoft Entra ID (Azure AD), Active Directory, and SSO technologies.
o Ensure alignment of IAM policies and processes with business and security requirements.
" Active Directory and Entra ID Management:
o Support the administration and maintenance of Active Directory forests, domains, trusts, and replication models.
o Manage and optimize Microsoft Entra ID services, including MFA, conditional access, and identity protection.
o Ensure high availability, scalability, and security of directory services.
" SSO Configuration and Support:
o Configure and support SSO solutions using protocols like SAML, OAuth, and OpenID Connect.
o Integrate SSO with cloud and on-premises applications to provide seamless authentication and secure access.
" Security and Compliance:
o Enforce security best practices, including role-based access control (RBAC), access policies, and identity governance.
o Monitor and ensure compliance with relevant regulatory standards, such as PCI, NIST, and 201 CMR 17.
o Conduct regular risk assessments, security reviews, and audits to ensure a secure IAM environment.
" Identity Lifecycle Management:
o Manage user provisioning, de-provisioning, and access reviews across systems and applications.
o Automate and improve IAM workflows to enhance efficiency and security.
Technical Support and Collaboration:
o Troubleshoot and resolve IAM-related issues, including SSO failures and directory integration issues.
o Work closely with cybersecurity, IT, and application teams to ensure seamless identity and access management.
o Provide technical guidance to other teams on IAM best practices.
" Documentation and Reporting:
o Develop and maintain technical documentation for IAM configurations and processes.
o Report IAM performance and issues to senior management and stakeholders.
REQUIREMENTS
" Must be able to travel to Lottery offices statewide and/or other locations, as required.
" Ability to provide on-call support for IAM issues during critical events.
PREFERRED QUALIFICATIONS
" 5+ years of experience in Identity and Access Management (IAM) with a focus on Microsoft Entra ID (Azure AD), Active Directory, and SSO integration.
" Experience with SSO technologies including SAML, OAuth, and OpenID Connect.
" Strong understanding of Active Directory architecture, including forests, domains, trusts, and replication.
" Hands-on experience with MFA, conditional access policies, and identity protection.
" Familiarity with regulatory compliance frameworks such as PCI, 201 CMR 17, and NIST.
" Experience in identity lifecycle management, including provisioning, de-provisioning, and access reviews.
" Strong problem-solving and troubleshooting skills with IAM systems.
" Relevant certifications such as Microsoft Certified: Azure Solutions Architect Expert, CISSP, or Certified Identity and Access Manager (CIAM) preferred.
EEO:
Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.
Required Skill Profession
Architecture And Engineering