Role: Senior Identity & Access Management (IAM) Engineer
Location: Remote (onsite as needed)
Experience: 10+ Years
Client: Health-Care
Rate: $50/hr on C2C
Must-Have Skills
5+ years of experience in IAM, Information Security, Directory Services, or related areas
Strong hands-on experience with Microsoft Active Directory and Microsoft Entra ID
Experience supporting hybrid identity, federation services, synchronization, and modern authentication
Hands-on experience with Google Cloud Platform IAM or comparable cloud identity platforms
Experience with Privileged Access Management (PAM) and privileged-account controls
Identity lifecycle management, provisioning/deprovisioning, RBAC, and access governance
Authentication and authorization protocols: SAML, OAuth, OpenID Connect (OIDC), LDAP, and Kerberos
Experience supporting HIPAA, SOX, audit, and compliance activities
Strong troubleshooting, analytical, communication, and cross-functional collaboration skills
Preferred Skills
Google Cloud Platform Config Connector (KCC) IAM resources
Wiz IAM, Security Command Center, and cloud-security monitoring tools
CyberArk, HashiCorp Vault, Delinea, BeyondTrust, or similar PAM solutions
Identity Governance and Administration (IGA) platforms
Automation/scripting with PowerShell, Python, Terraform, or Infrastructure as Code
Certifications: SC-300, Security+, AZ-500, CISSP, CISM, Microsoft Security, or Google Cloud Platform Security Engineer
Experience in healthcare, life sciences, financial services, or other regulated industries
Key Responsibilities
Design, implement, and support IAM solutions across Google Cloud Platform landing zones and hybrid identity environments
Administer Microsoft Entra ID and Active Directory, including federation, synchronization, and authentication services
Implement IAM standards, security policies, access controls, RBAC, group-based permissions, and privileged-access controls
Configure and manage PAM capabilities for administrative and elevated-access scenarios
Support Active Directory hardening, identity governance, least privilege, and Zero Trust principles
Configure and maintain AD organizational units, GPOs, security groups, and delegated-administration models
Troubleshoot authentication, authorization, provisioning, and federation issues across cloud and on-premises environments
Perform access reviews and remediate excessive, unused, or inappropriate access
Monitor IAM security events, audit logs, and privileged-access activity
Support onboarding, offboarding, role changes, emergency terminations, and high-risk access revocation
Participate in on-call support, incident response, root-cause analysis, disaster recovery, and business-continuity activities
Partner with Security, Infrastructure, Compliance, Audit, and Application teams on IAM requirements and audit readiness Develop runbooks, SOPs, IAM documentation, training materials, and automation initiatives