What are the responsibilities and job description for the IAM Technical Analyst / Engineer (Entra ID)/ Azure Active Directory position at SANS?
Job Details
Diversity candidates preferred
Job Description:
Hybrid - 3-4 days a week.
This person will be part of the Identity solutions team, responsible for administrating ENTRA ID and related integrations. The ideal candidate will have 10 years of demonstrated experience working with Microsoft Entra ID (formerly. Azure Active Directory), integrating various systems, applications, various Directories (OpenLDAP, Active Directory), and SSO technologies (such as Shibboleth (SAML2), OpenID Connect (OIDC). Understanding of various bridging and federation mechanisms (example: CirrusIdentity Bridge / Proxy)
This individual will work with IAM and Security team members to enhance the security of our environment by developing processes and implementing technology around user identity and access management and zero-trust methodologies.
Create and maintain system documentation for domain technologies, including installation, configuration, and appropriate troubleshooting steps
Expertise in designing, implementing, and managing Entra Active Directory services in both on-premises and cloud environments
Experience writing scripting languages (PowerShell, Python) for automation and configuration tasks
Experience with identity federation, single sign-on (SSO), and multi-factor authentication (MFA) solutions, SAML2, OpenID Connect / OAuth2, REFEDS, Federation, Proxy, and Bridge systems as CirrusIdentity.
Proven experience as an Entra ID, Active Directory Engineer, or similar role, with a focus on cloud migration and integrations
Strong analytical and problem-solving skills, with the ability to troubleshoot complex identity management issues
Strong communication and interpersonal skills, with the ability to work effectively in a team-oriented environment
Individual will work with number of vendors on a global scale multi-year project to configure at least two instances of EntraID SaaS solution and connect up existing OpenLDAP Directory, multiple Active Directories for password synching, bridge SSO (SAML2 and OIDC) systems to allow for go-live with new authentication and password migration. Develop Entra workflows around account activations that allow business units to move away from the current process.