Sr IAM Engineer

Title: Sr IAM Engineer

Location: Evanston, IL-2 days/week onsite

Must Have:

• Microsoft Entra ID
• Active Directory
• Hybrid Identity
• Federation
• SSO, MFA
• Conditional Access & Identity security best practices

• MS Entra ID Platform Engineering & Administration

• Engineer, administer, and support Microsoft Entra ID Services, including tenant configuration, sync, authentication methods, identify protection capabilities, and access policies.
• Discover, Design, implement, govern and maintain security identity solutions for human and non-human accounts.
• Support hybrid identity environments integrating on premise Active Directory and Microsoft Entra ID.
• Manage directory synchronization, federation, and authentication services, including MS Entra Connect and cloud sync solutions.
• Extensive experience integrating enterprise, SaaS, cloud and custom applications with MS Entra ID.
• Experience migrating large portfolios of applications from legacy authentication platforms to MS Entra ID.
• Configure and maintain enterprise application integrations for SAML, OAuth, OpenD Connect and WS- deration.

• IAM Operations & Service Ownership (24 x 7)

• Administer, and maintain end-to-end availability, reliability and performance of IAM platforms
• Participate in 24x7 on call rotation, coverage and escalation paths
• Participate in major incident (P1/P2) response for identity and access disruptions
• Manage IAM TDX ticket ques, ensure remediation - responses, problem resolution, and root cause analysis (RCA), documentation and communication are tracked and complete within

appropriate SLA's.

• Maintain continuous audit readiness posture
• Maintain dashboards for IAM service health: to include system

• Vendor Product Lifecycle, Maintenance & Upgrade Management

• Execute product upgrades within IAM global calendar lifecycle, following appropriate IAM processes, documentation, testing, change management and communications.
• Maintain current vendor-supported versions to minimize risk exposure
• Evaluate vendor release notes for security vulnerability fixes, major and minor releases, and integration impacts.
• Partner with vendors and managed service providers for platform optimization and support escalations.

• Change Management & Release Governance

• Ensure change management processes and procedures are followed. That includes: all appropriate documentation, testing, peer review, Pre-CAB, CAB.
• Ensure appropriate coordination with other teams and communication with CAB
• Ensure all changes have appropriate rollout plan inclusive of impact assessment, backout plan, and post implementation support.

• Platform Engineering & Best Practices

• Design, collaborate, and enforce IAM architecture and configuration standards and utilize industry best practices.
• Maintain standard operating procedures (SOP's) and runbooks for operational maintenance & upgrades, incident response and system recovery, as well as operational readiness to respond to security incidents (SI).
• Promote automation including scripting (various types), use of orchestration tools (Jenkins), Api's,etc.
• Promote adherence to best practices - (SOD) separation of duties, (PAM) privilege access management, (AM) access management and the use of least privilege principles.