IAM Engineer

Our client is seeking an experienced Microsoft Entra ID / Identity & Access Management (IAM) Consultant to support a strategic identity and security initiative within a highly regulated financial services environment.

This consultant will assess the current identity architecture, provide hands-on Microsoft Entra ID expertise, strengthen access controls, and help design and implement a secure, scalable IAM environment. The ideal candidate combines deep Microsoft Entra technical expertise with strong consulting skills and understands the security, governance, and compliance requirements of banking or financial services organizations.

Key Responsibilities

• Assess the existing Microsoft Entra ID environment and recommend improvements to identity architecture, security, and governance.
• Design, configure, and optimize Microsoft Entra ID / Azure AD solutions.
• Implement and manage Conditional Access, MFA, SSO, RBAC, and identity protection policies.
• Integrate Entra ID with core banking, CRM, SaaS, Microsoft 365, Azure, and enterprise applications.
• Design and support Single Sign-On (SSO) using SAML, OAuth 2.0, OpenID Connect, and related authentication standards.
• Implement Privileged Identity Management (PIM) and least-privilege access strategies.
• Support Identity Governance, access reviews, entitlement management, lifecycle workflows, and Joiner/Mover/Leaver processes.
• Evaluate and improve hybrid identity environments involving Active Directory, Entra Connect/Cloud Sync, and Microsoft Entra ID.
• Troubleshoot complex authentication, authorization, provisioning, and application-integration issues.
• Partner with cybersecurity, infrastructure, application, risk, audit, and compliance teams.
• Develop technical documentation, architecture recommendations, and implementation roadmaps.
• Help establish an Entra environment that supports financial-services security and regulatory requirements.

Required Experience

• 5+ years of experience in Identity & Access Management (IAM), cybersecurity, or Microsoft identity technologies.
• Strong hands-on expertise with Microsoft Entra ID (Azure Active Directory).
• Experience with Conditional Access, MFA, SSO, PIM, RBAC, Identity Protection, and Identity Governance.
• Strong knowledge of Active Directory and hybrid identity architectures.
• Experience integrating enterprise applications using SAML, OAuth 2.0, OpenID Connect, and SCIM.
• Understanding of Zero Trust and least-privilege security principles.
• Experience performing identity assessments, implementations, migrations, or modernization initiatives.
• Strong communication skills with the ability to work as both a hands-on engineer and trusted technical consultant.

Highly Preferred

• Previous experience within banking, financial services, fintech, insurance, or another highly regulated environment.
• Understanding of financial-services security and compliance frameworks such as FFIEC, GLBA, SOX, PCI DSS, NIST, and CIS controls.
• Microsoft certifications related to Identity, Security, or Azure.
• Experience with Microsoft Defender, Microsoft Sentinel, Intune, or the broader Microsoft security ecosystem.
• Experience helping organizations transition from legacy or hybrid identity environments toward a Zero Trust / cloud-first identity architecture.