IAM Engineer Opportunity

Job Title: Identity and Access Management (IAM) Engineer

Worksite Address: Braintree, MA Office (Hybrid)

Work Arrangement

Remote Work Details: Hybrid Three days onsite at Braintree Office

Engagement Details

Engagement Length: Through January 31, 2026

Project Duration: Approximately six months

Hours per Week: 37.5 hours

Position Summary

The IAM Engineer will implement, manage, and maintain the identity and access management infrastructure. The role ensures secure, efficient, and scalable access to digital resources while supporting business objectives and maintaining compliance with security standards.

Key Responsibilities

IAM Implementation and Administration

Design, configure, and manage IAM framework using Microsoft Entra ID (Azure AD), Active Directory, and SSO technologies.

Align IAM policies with business and security requirements.

Active Directory and Entra ID Management

Administer and maintain AD forests, domains, trusts, and replication.

Manage Entra ID services including MFA, conditional access, and identity protection.

Ensure high availability and security of directory services.

SSO Configuration and Support

Configure and support SSO using SAML, OAuth, and OpenID Connect.

Integrate SSO with cloud and on-prem applications.

Security and Compliance

Enforce RBAC, access policies, and identity governance.

Ensure compliance with PCI, NIST, and 201 CMR 17.

Conduct risk assessments, security reviews, and audits.

Identity Lifecycle Management

Manage provisioning, de-provisioning, and access reviews.

Automate IAM workflows for efficiency and security.

Technical Support and Collaboration

Troubleshoot IAM issues including SSO and directory integration.

Collaborate with cybersecurity, IT, and application teams.

Provide IAM best practice guidance.

Documentation and Reporting

Maintain technical documentation.

Report IAM performance and issues to stakeholders.

Requirements

Must be able to travel to Lottery offices statewide as needed.

Ability to provide on-call support during critical IAM events.

Preferred Qualifications

5+ years of IAM experience with Microsoft Entra ID (Azure AD), Active Directory, and SSO.

Experience with SAML, OAuth, and OpenID Connect.

Strong understanding of AD architecture (forests, domains, trusts, replication).

Experience with MFA, conditional access, and identity protection.

Familiarity with PCI, 201 CMR 17, and NIST compliance.

Experience in identity lifecycle management.

Strong troubleshooting skills.

Relevant certifications (e.g., Microsoft Certified: Azure Solutions Architect Expert, CISSP, CIAM).