IAM/Security Engineer

About the role

This role is primarily focused on Identity and Access Management (IAM) with an opportunity to contribute to broader security engineering initiatives. The ideal candidate will have strong hands-on experience with Microsoft Entra ID/Azure AD, SSO, identity administration, access management, and authentication, along with experience supporting Microsoft security tools such as Microsoft Defender. This will be a hybrid position in Minneapolis, MN.

Identity & Access Management – 75%

• Administer and support Microsoft Entra ID (Azure AD) and enterprise identity services
• Configure, manage, and troubleshoot Single Sign-On (SSO) solutions
• Provision and manage user and team accounts throughout the identity lifecycle
• Manage identity and access permissions in accordance with security and business requirements
• Administer Azure accounts and identity-related services
• Manage and support certificates and certificate-based authentication
• Develop, implement, and maintain access policies and permissions
• Troubleshoot authentication, authorization, and access-related issues
• Partner with IT and business teams to ensure users have appropriate access to systems and applications
• Help maintain secure and efficient identity processes and controls

Security Engineering – 25%

• Administer and support Microsoft Defender security solutions
• Perform day-to-day monitoring, administration, and maintenance of endpoint security tools
• Support endpoint detection and response (EDR) capabilities
• Investigate and assist with resolving security alerts and endpoint-related security issues
• Evaluate existing security controls and recommend improvements
• Assist with the development and implementation of security policies and standards
• Partner with security and IT teams to strengthen the organization's overall security posture

Requirements

• 8+ years of experience in IAM, Identity Engineering, Security Engineering, or a related field
• Strong hands-on experience with Microsoft Entra ID / Azure AD
• Experience administering SSO and authentication solutions
• Experience with user provisioning, identity lifecycle management, permissions, and access controls
• Understanding of RBAC, MFA, Conditional Access, and identity security concepts
• Experience with Microsoft Defender, preferably Defender for Endpoint or related Microsoft security solutions
• Knowledge of endpoint security and detection/response concepts
• Experience troubleshooting authentication and access issues
• Strong communication and collaboration skills
• Ability to work across both identity and security teams and translate business requirements into effective security controls

Preferred Qualifications

• SailPoint or other Identity Governance and Administration (IGA) experience
• Active Directory experience
• Experience with certificate management / PKI
• PowerShell or other scripting/automation experience
• Experience with Microsoft Intune
• Experience developing or implementing RBAC frameworks
• Knowledge of Zero Trust and modern identity security practices
• Microsoft security or identity certifications