IAM Security Specialist - Information Technology Specialist 4

About the role

The IAM Security Specialist plays a pivotal role in implementing role-based access and group policy with the Infrastructure Team. This individual is responsible for the comprehensive management and oversight of the Active Directory (AD) & Entra ID environment, including the design, deployment, maintenance, and optimization of the directory services.

Responsibilities

• Administer and support Active Directory, Entra ID, identity management systems, and Group Policy in a hybrid environment.
• Implement and manage Identity and Access Management (IAM) systems, including SSO frameworks, authentication protocols, and access controls.
• Experience implementing and managing Identity and Access Management (IAM) systems, including SSO frameworks, authentication protocols, and access controls.
• Hands-on experience with security tools such as Microsoft Defender, Defender XDR, Sentinel, ADManager Plus, and ADAudit Plus, including monitoring, alert response, and compliance reporting.
• Knowledge of security best practices, identity governance, zero-trust principles, and regulatory requirements applicable to identity and access management.
• Ability to troubleshoot complex directory, authentication, and access-control issues, including AD DS, GPOs, ADFS, DNS, and DHCP-related identity dependencies.
• Collaborate with the Development Team and other members of the Infrastructure Team to integrate AD services with various systems and applications.
• Maintain up-to-date documentation and conduct regular security and performance monitoring.
• Ensure robust backup and recovery strategies for identity management and upgrade systems to mitigate potential security threats.

Requirements

• Four (4) years of information technology experience that includes administering and supporting Active Directory, Entra ID, identity management systems, and Group Policy in a hybrid environment.
• Experience implementing and managing Identity and Access Management (IAM) systems, including SSO frameworks, authentication protocols, and access controls.
• Hands-on experience with security tools such as Microsoft Defender, Defender XDR, Sentinel, ADManager Plus, and ADAudit Plus, including monitoring, alert response, and compliance reporting.
• Knowledge of security best practices, identity governance, zero-trust principles, and regulatory requirements applicable to identity and access management.
• Ability to troubleshoot complex directory, authentication, and access-control issues, including AD DS, GPOs, ADFS, DNS, and DHCP-related identity dependencies.

Qualifications

• A master’s degree in information technology or a related field substitutes for eighteen months of experience, OR a related bachelor’s degree substitutes for one year, OR a related Associate’s substitutes for six months.
• Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent professional experience in identity administration and global policy design.
• Advanced proficiency with Active Directory/Entra architecture, including forests, domains, trusts, RBAC design, and hybrid identity integration.
• Experience automating identity and access processes, including PowerShell scripting, automated access reviews, and workflow-based provisioning/deprovisioning.
• O365/Entra/Azure administration experience, including PIM, MFA, conditional access, and cloud certificate management.
• Experience leading identity-focused projects and collaborating with cross-functional IT, security, and vendor teams.
• Professional certifications such as CIAM, CIMP, Microsoft security/identity certifications, or other IAM-related credentials demonstrating ongoing professional development.