Senior IAM Entra Engineer

Position: Senior IAM Entra Engineer
Location: Evanston, IL 60201 2 days/week onsite Duration: 2 Years
Type: Contract-to-Hire (CTH)

Job Summary

We are seeking a Senior IAM Entra Engineer with strong experience in Microsoft Entra ID, Active Directory, Hybrid Identity, Federation, SSO, MFA, Conditional Access, and Identity Security. This role will support IAM platform engineering, administration, application integration, security, governance, and day-to-day operations across cloud and on-premises environments.

Must-Have Skills

Microsoft Entra ID | Active Directory | Hybrid Identity | Federation | Single Sign-On (SSO) | Multi-Factor Authentication (MFA) | Conditional Access | Identity Security Best Practices | Microsoft Entra Connect / Cloud Sync | Enterprise Application Integration | SAML | OAuth | OpenID Connect | WS-Federation

Key Responsibilities

• Engineer, administer, and support Microsoft Entra ID, including tenant configuration, authentication methods, identity protection, and access policies.
• Support hybrid identity environments integrating on-premises Active Directory with Microsoft Entra ID.
• Manage Entra Connect, Cloud Sync, federation, synchronization, and authentication services.
• Configure and maintain SSO, MFA, Conditional Access, and identity security policies.
• Integrate enterprise, SaaS, cloud, and custom applications with Microsoft Entra ID.
• Support application authentication using SAML, OAuth, OpenID Connect, and WS-Federation.
• Support migration of applications from legacy authentication platforms to Microsoft Entra ID.
• Troubleshoot IAM incidents, resolve service issues, perform root-cause analysis (RCA), and maintain technical documentation.
• Participate in 24x7 on-call support and critical IAM incident response as required.
• Support platform upgrades, maintenance, security updates, vulnerability remediation, and change management.
• Develop and maintain SOPs, runbooks, and operational procedures.
• Promote IAM automation using scripting, APIs, and orchestration tools.
• Apply least privilege, separation of duties, privileged access management, and identity governance principles.
• Collaborate with infrastructure, security, application, and other IT teams and provide technical guidance.

Qualifications

• Strong hands-on experience with Microsoft Entra ID and Active Directory.
• Experience with hybrid identity, federation, SSO, MFA, and Conditional Access.
• Experience integrating enterprise and SaaS applications with Microsoft Entra ID.
• Strong troubleshooting, problem-solving, documentation, and communication skills.
• Experience with IAM security, governance, and automation.
• Ability to work 2 days per week onsite in Evanston, IL and participate in on-call support when required.