IAM Engineer

Job Summary

We are looking for an experienced Identity and Access Management (IAM) Engineer to manage and secure user access across enterprise applications and cloud platforms. You will be responsible for provisioning, modifying, and revoking user access, administering Microsoft Entra ID, supporting RBAC processes, and ensuring compliance with security and audit requirements.

Key Responsibilities

• Manage the complete user lifecycle (Joiner, Mover, Leaver) by provisioning, updating, and removing user access.
• Administer Microsoft Entra ID, including users, groups, roles, and access permissions.
• Support automated and manual access provisioning using RBAC processes.
• Troubleshoot authentication, access, and directory-related issues.
• Manage security groups, user accounts, and access requests based on approved processes.
• Maintain accurate audit records and ITSM documentation for all access-related activities.
• Support access reviews, compliance audits, and remediation activities.
• Collaborate with HR, Service Desk, Security, and application owners to resolve IAM requests.
• Contribute to process improvements, documentation, and automation initiatives.

Required Skills

• 7-10 years of experience in Identity and Access Management or Directory Services.
• Hands-on experience with Microsoft Entra ID (Azure AD).
• Strong understanding of IAM lifecycle processes (Joiner, Mover, Leaver).
• Experience with Role-Based Access Control (RBAC) and access provisioning.
• Knowledge of Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, and least-privilege principles.
• Experience using ITSM tools for request and incident management.
• Strong troubleshooting and documentation skills.

Good to Have

• Experience with HRIS platforms such as Humaans or similar.
• Exposure to IAM automation platforms.
• Knowledge of PowerShell or scripting for user administration.
• Familiarity with ISO 27001, SOC, GDPR, or similar security and compliance frameworks.
• Relevant certifications such as Microsoft Identity and Access Administrator, Azure Administrator, ITIL Foundation, or Security+.