IAM SME

Title: IAM SME

Location: Remote

Roles & Responsibilities

• 10+ years of IAM experience with strong expertise in Microsoft Entra ID (Azure AD) in enterprise production environments.
• Act as IAM & SSO SME, supporting engineering and BAU operations under defined SLAs / OLAs.
• Provide L3 operational support for Entra ID services, including SSO, MFA, Conditional Access, federation, and provisioning issues.
• Support and execute SSO onboarding and changes for SaaS, custom, and on Prem applications using SAML 2.0, OIDC/OAuth 2.0, and SCIM.
• Own incident escalation and resolution for IAM services, including P1/P2 incidents, RCA, and permanent fixes within SLA timelines.
• Support change management activities related to IAM policies, application integrations, and platform enhancements.
• Operate and support identity governance controls, including PIM, Access Reviews, RBAC, and ABAC.
• Support hybrid identity operations: Active Directory, Entra Connect / Cloud Sync, federation (AD FS where applicable)
• Support Azure IAM permissions across Management Groups, Subscriptions, Resource RBAC, service principals, and managed identities.
• Perform proactive monitoring, health checks, and service reviews to ensure availability and stability of identity platforms.
• Maintain SOPs, runbooks, and operational documentation aligned to managed service delivery.
• Experience automating Entra ID IAM operations using PowerShell and Microsoft Graph API (user/group management, app assignments, PIM).
• Ability to implement automation for BAU efficiency, including JML processes, SSO onboarding standardization, and identity hygiene remediation.
• Participate in oncall / shift support to ensure 24x7 identity service continuity.

Certifications

• Microsoft Certified: Identity and Access Administrator Associate (Required)
• Microsoft Certified: Azure Solutions Architect Expert or equivalent (Preferred)