IAM Engineer

Title: IAM Engineer
Location: Atlanta and Charlotte
Onsite/Remote – 100% (Onsite)
Duration: 12 Months

Business Initiative/Purpose:
(Goal, Business Impact, Accomplishments from the work)
Enables rapid implementation of secure access controls, external identity architecture, and strong authentication (FIDO2, passkeys). This accelerates risk reduction, validates designs, supports migrations, and ensures scalable, policy-driven IAM capabilities are deployed.

Description :
Bachelor Degree: (Required, Preferred or Not Required)

• Not Required.

Role Responsibilities: (what they will be doing)

• Work with Cyber and Enterprise architectures to on selection (and development as needed) of appropriate IAM patterns, and translate into engineering / implementation designs.
• Work with SMEs across other technology teams (End User tech: Desktop, Mobile, Collab, VDI, etc; Network services: VPN) on IAM designs, configuration, pilot testing & implementation)
• Work with Project Management team to identify (and size: resource requirements and timelines)technical tasks to implement various program deliverables
• Configure Entra ID identity, trust settings, and entitlement management
• Implement Conditional Access with phishing-resistant MFA (FIDO2) and risk-based controls
• Migrate federated applications and validate authentication flows
• Help develop and support processes to procure and manage FIDO2 keys, manage implementation of passkeys, and provide IAM support for Windows Hello for Business rollouts
• Enable step-up authentication for sensitive operations
• Identify break glass accounts and secure privileged access paths according to Architecture patterns
• Validate playbooks, assess lifecycle models, and support deployment expansion

Must Have Skills/Prior Experiences: (Vendor should not submit any candidate that does not have these skills/prior experience.)

• Identity & Access Management (IAM) Architecture - Ability to design and implement enterprise identity patterns, authentication models, authorization frameworks, and access governance aligned with security and enterprise architecture standards.
• Microsoft Entra ID Administration & Engineering - Expertise in configuring Entra ID tenants, identity trust relationships, entitlement management, application integrations, and hybrid identity solutions.
• Zero Trust & Conditional Access Design - Experience implementing risk-based access controls, Conditional Access policies, device trust requirements, and adaptive security measures based on Zero Trust principles.
• Strong Authentication Technologies (FIDO2, Passkeys, WHfB) - Knowledge of phishing-resistant authentication methods including FIDO2 security keys, passkeys, Windows Hello for Business, and modern credential lifecycle management.
• Identity Federation & Application Migration - Ability to migrate federated applications, validate SAML/OIDC/OAuth authentication flows, troubleshoot identity integrations, and modernize legacy authentication platforms.
• Privileged Access Management (PAM) & Secure Administration - Experience securing privileged accounts, managing break-glass access, implementing least-privilege models, and protecting administrative access paths.
• IAM Program Delivery & Cross-Functional Engineering - Capability to collaborate with architecture, endpoint, networking, and project management teams to design, pilot, estimate, and deploy IAM solutions at enterprise scale.
• Identity Architecture and Microsoft Entra External ID

EEO

“Mindlance is an Equal Opportunity Employer and does not discriminate in employment on the basis of – Minority/Gender/Disability/Religion/LGBTQI/Age/Veterans.”