IAM Engineer

Responsibilities

Kforce has a client in Boston, MA that is seeking an IAM Engineer. Responsibilities:

• IAM Engineer will assist in designing, configuring, and managing the IAM framework using Microsoft Entra ID (Azure AD), Active Directory, and SSO technologies
• Ensure alignment of IAM policies and processes with business and security requirements
• Support the administration and maintenance of Active Directory forests, domains, trusts, and replication models
• Manage and optimize Microsoft Entra ID services, including MFA, conditional access, and identity protection
• Ensure high availability, scalability, and security of directory services
• Configure and support SSO solutions using protocols like SAML, OAuth, and OpenID Connect
• Integrate SSO with cloud and on-premises applications to provide seamless authentication and secure access
• Enforce security best practices, including role-based access control (RBAC), access policies, and identity governance
• As an IAM Engineer, you will monitor and ensure compliance with relevant regulatory standards, such as PCI, NIST, and 201 CMR 17
• Conduct regular risk assessments, security reviews, and audits to ensure a secure IAM environment
• Manage user provisioning, de-provisioning, and access reviews across systems and applications
• Automate and improve IAM workflows to enhance efficiency and security
• Troubleshoot and resolve IAM-related issues, including SSO failures and directory integration issues
• Work closely with cybersecurity, IT, and application teams to ensure seamless identity and access management
• Provide technical guidance to other teams on IAM best practices
• Develop and maintain technical documentation for IAM configurations and processes
• Report IAM performance and issues to senior management and stakeholders
  
  

Requirements

• 5 years of experience in Identity and Access Management (IAM) with a focus on Microsoft Entra ID (Azure AD), Active Directory, and SSO integration
• Experience with SSO technologies including SAML, OAuth, and OpenID Connect
• Experience in identity lifecycle management, including provisioning, de-provisioning, and access reviews
• Hands-on experience with MFA, conditional access policies, and identity protection
• Strong understanding of Active Directory architecture, including forests, domains, trusts, and replication
• Familiarity with regulatory compliance frameworks such as PCI, 201 CMR 17, and NIST
• Strong problem-solving and troubleshooting skills with IAM systems
  
  

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking “Apply Today” you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.