Principal Identity Governance and Administration

Skills
Microsoft AzureActive DirectoryPowershellMicrosoft Entra IDConditional AccessMFASSO
Role

What the job involves

The main requirements, responsibilities and hiring steps.

Requirements

  • Extensive hands-on experience in IAM architecture engineering and operational delivery
  • Deep technical expertise with Microsoft Entra ID Azure Active Directory PowerShell and Microsoft cloud identity services
  • Experience with SQL or relational data platforms for reporting reconciliation and analysis
  • Understanding of SAML OAuth 2.0 OpenID Connect Kerberos LDAP and SCIM
  • Strong analytical troubleshooting and problem-solving skills in complex enterprise environments
  • Experience implementing enterprise-grade IGA tools such as SailPoint Saviynt or Okta
  • Bachelor’s degree in IT Information Security Computer Science or related field or equivalent experience
  • 8+ years of progressive experience in IAM security engineering infrastructure engineering or related disciplines
  • Prior experience providing technical direction making architecture decisions and leading engineering execution
  • Demonstrated success designing and implementing IAM solutions in enterprise environments
  • Advanced hands-on experience with PowerShell automation and Microsoft identity technologies
  • Experience with Azure Active Directory enterprise application integration and identity federation technologies
  • Relevant certifications such as CISSP CISM Microsoft security identity or Azure certifications are a plus

Nice to have

  • Hands-on technical leader
  • Global environment experience
  • Complex enterprise environments
  • Strong analytical mindset
  • Problem-solving ability

Day to day

  • Lead architecture engineering automation and operational delivery of enterprise IAM capabilities across a complex global environment
  • Design build and support scalable identity solutions including workforce privileged service and application identities
  • Partner with security infrastructure cloud DevOps application and business teams to modernize authentication access models and strengthen governance