What are the responsibilities and job description for the IAM Architect (Azure Engineering)-W2 position at Narvee Tech Inc?
Job Details
Position: IAM Architect (Azure Engineering)
Location: Atlanta or charlotte (Onsite)
Duration : 8-12 Months
Job Description:
Summary:
Experienced and results-driven Azure Engineering IAM Architect with 7 years of hands-on expertise in designing, implementing, and managing Identity and Access Management (IAM) systems in complex, enterprise-grade Azure environments. Proven track record of developing secure, scalable, and policy-compliant access control models using Azure AD, IAM policies, and RBAC. Adept at working with cross-functional teams to ensure identity governance, security posture management, and regulatory compliance.
Key Skills:
- Azure Identity & Access Management (IAM)
- Azure RBAC (Role-Based Access Control)
- Custom RBAC Role Definition and Scoping
- Conditional Access Policies
- Privileged Identity Management (PIM)
- Azure Active Directory (Azure AD)
- Azure Policy and Azure Blueprints
- Enterprise-Grade IAM Architecture
- Identity Governance and Compliance
- Access Reviews and Audit Trails
- B2B and B2C Identity Management
- Integration with On-Prem AD / Hybrid Identity
- Terraform / Bicep / ARM Templates for IAM Automation
- Microsoft Entra ID / Identity Protection
- Zero Trust Architecture Implementation
Technical Expertise:
- Cloud Platforms: Microsoft Azure, Microsoft Entra ID
- IAM Tools: Azure AD, PIM, Azure Policy, Defender for Cloud
- Automation: PowerShell, Azure CLI, Terraform, Bicep
- Monitoring & Auditing: Azure Monitor, Log Analytics, Security Center
- DevSecOps Alignment: Integration with CI/CD pipelines
- Compliance: ISO 27001, NIST, GDPR, HIPAA, SOX
Responsibilities handled:
- Designed and implemented RBAC models for Azure subscriptions across multiple tenants with principle of least privilege.
- Created and maintained custom IAM policies to govern access to Azure resources using tagging and policy initiatives.
- Integrated Azure AD with third-party IdPs (Okta, Ping, ADFS) for SSO and identity federation.
- Enabled PIM to manage and monitor just-in-time privileged access.
- Developed automated scripts using Terraform and Bicep to deploy IAM resources in compliance with company standards.
- Worked with security and compliance teams to enforce Conditional Access, MFA, and audit logging.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
