Identity Governance Engineer

We need to output HTML fragment with sections: About the role (description), Responsibilities, Requirements (maybe Minimum Qualifications), Skills (Preferred Skills And Experience), Benefits (if any), Pay (Compensation), Schedule (if any). We must only include sections that have real specific content. The posting includes description paragraph after "Description". That's about the role. We'll put that in

About the role

then

with that paragraph. Responsibilities: The bullet list after "Responsibilities". It includes a line "3+ years of professional relative experience" then many bullet-like sentences. We need to treat each line as list item. We'll wrap in

• ... etc. Minimum Qualifications: after "Minimum Qualifications". It includes bullet list lines. We'll put under

  Requirements

  (or Qualifications). The instruction says use headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We can choose Requirements for minimum qualifications. Could also have Qualifications for preferred? But they said prefer few substantive sections. We'll have Requirements for minimum qualifications, Skills for preferred skills. Benefits: The posting mentions "In addition to base salary, for full-time hires, you may also be eligible for long-term incentives, in the form of stock options, and access to medical, vision & dental coverage as well as access to a 401(k) retirement plan." That's benefits. So we include Benefits section. Pay: Compensation line: "$140,000 - $180,000 / year". So we include Pay. Schedule: Not mentioned. So omit. We must not include boilerplate like EEO, ITAR, etc. Remove those. We must not repeat job title as heading. Not include Job ID. We must preserve all substantive information. Ensure we include all bullet points from Responsibilities, Minimum Qualifications, Preferred Skills. We need to format as HTML fragment only. Let's extract content. Description paragraph: "As an Identity Governance Engineer at Impulse, you will maintain, enhance, and scale our enterprise identity and access management capabilities. This role will help ensure that users, devices, administrators, applications, and other identities have appropriate access throughout their lifecycle. The Identity Governance Engineer will work across Information Security, IT, Engineering, and business teams to strengthen identity governance, authentication, privileged access, directory services, and identity automation across corporate, cloud, and regulated environments. This is a hands-on engineering role for someone with strong experience in Active Directory, Microsoft Entra ID, identity governance, Conditional Access, and enterprise authentication technologies." That's the description. Responsibilities bullet list: The text after "Responsibilities" includes: "3+ years of professional relative experience" "Maintain and enhance enterprise Identity Governance and Administration (IGA) capabilities" "Manage and improve identity lifecycle processes, including provisioning, deprovisioning, access changes, and periodic access reviews" "Maintain and enhance Microsoft Active Directory and Microsoft Entra ID, including users, groups, roles, privileged identities, and hybrid identity integrations" "Maintain and continuously improve Microsoft Entra Conditional Access, authentication methods, and identity security policies" "Support and enhance certificate-based authentication for user and device identities" "Maintain and improve Privileged Identity Management (PIM) and integrations with Privileged Access Management (PAM) capabilities" "Maintain enterprise SSO, federation, and automated provisioning integrations using technologies such as SAML, OAuth/OIDC, and SCIM" "Govern employee, contractor, partner, B2B, service account, application, and other non-human identities" "Maintain and enhance identity governance across Microsoft 365, Azure, AWS, SaaS applications, and enterprise systems" "Develop automation using technologies such as PowerShell, Microsoft Graph, REST APIs, and Python." "Partner with Security Operations and Security Engineering to monitor, investigate, and remediate identity-related security risks." "Maintain identity and access controls supporting organizational security and compliance requirements" Note the first bullet "3+ years of professional relative experience" seems like a qualification but it's placed under Responsibilities. We'll keep as list item. Minimum Qualifications bullet list: "5+ years of professional relative experience" "Experience in Identity and Access Management, Identity Governance, Security Engineering, or a related discipline" "Strong hands-on experience administering and engineering Microsoft Active Directory" "Strong hands-on experience with Microsoft Entra ID / Azure AD and hybrid identity environments" "Experience managing Conditional Access, MFA, authentication methods, and privileged access" "Experience with identity lifecycle management, RBAC, least privilege, access reviews, and entitlement governance" "Experience with enterprise authentication and federation technologies such as SAML, OAuth 2.0, OpenID Connect, and SCIM" "Experience with scripting and automation using PowerShell and APIs." "Working knowledge of PKI, X.509 certificates, and certificate-based authentication" "Strong troubleshooting, documentation, and communication skills" Preferred Skills And Experience bullet list: "Experience with Microsoft Entra ID Governance, including Entitlement Management, Access Reviews, Lifecycle Workflows, and PIM" "Experience with Entra certificate-based authentication, Active Directory certificate authentication, 802.1X/EAP-TLS, and user/device certificates" "Experience with enterprise PAM technologies." "Experience governing identity and access across Azure, AWS, and SaaS environments" "Experience with B2B/external identity and non-human identity governance" "Experience securing Active Directory and Entra ID against identity-based attacks" "Experience with SIEM and identity security monitoring" "Experience working in aerospace, defense, government contracting, or another regulated industry" "Familiarity with CMMC, NIST SP 800-171, NIST SP 800-172, or NIST SP 800-53" Benefits paragraph: "In addition to base salary, for full-time hires, you may also be eligible for long-term incentives, in the form of stock options, and access to medical, vision & dental coverage as well as access to a 401(k) retirement plan." Pay: "$140,000 - $180,000 / year" We should not include extra fluff like "Compensation bands are determined by role, level, location, and alignment with market data..." That's more detail but maybe considered substantive? It's about compensation details. The instruction: include Pay section only if posting actually states them. It does state compensation range. The extra sentence about bands may be considered additional info but could be included in Pay section as prose. However we must not invent or summarize away detail. We could include that sentence as part of Pay section paragraph. It's substantive. Let's include it. Similarly, there is ITAR and EEO boilerplate which we must remove. Thus Pay section:

  Pay

  $140,000 - $180,000 / year. Compensation bands are determined by role, level, location, and alignment with market data. Individual level and base pay is determined on a case-by-case basis and may vary based on job-related skills, education, experience, technical capabilities and internal equity.

  But note the sentence about Individual level etc is also part of the posting. We'll include. Benefits section: as above. Now ensure we don't include any duplicated lines. Now produce HTML:

  About the role

  As an Identity Governance Engineer at Impulse, you will maintain, enhance, and scale our enterprise identity and access management capabilities. This role will help ensure that users, devices, administrators, applications, and other identities have appropriate access throughout their lifecycle. The Identity Governance Engineer will work across Information Security, IT, Engineering, and business teams to strengthen identity governance, authentication, privileged access, directory services, and identity automation across corporate, cloud, and regulated environments. This is a hands-on engineering role for someone with strong experience in Active Directory, Microsoft Entra ID, identity governance, Conditional Access, and enterprise authentication technologies.

  Responsibilities

  • 3+ years of professional relative experience
  • Maintain and enhance enterprise Identity Governance and Administration (IGA) capabilities
  • Manage and improve identity lifecycle processes, including provisioning, deprovisioning, access changes, and periodic access reviews
  • Maintain and enhance Microsoft Active Directory and Microsoft Entra ID, including users, groups, roles, privileged identities, and hybrid identity integrations
  • Maintain and continuously improve Microsoft Entra Conditional Access, authentication methods, and identity security policies
  • Support and enhance certificate-based authentication for user and device identities
  • Maintain and improve Privileged Identity Management (PIM) and integrations with Privileged Access Management (PAM) capabilities
  • Maintain enterprise SSO, federation, and automated provisioning integrations using technologies such as SAML, OAuth/OIDC, and SCIM
  • Govern employee, contractor, partner, B2B, service account, application, and other non-human identities
  • Maintain and enhance identity governance across Microsoft 365, Azure, AWS, SaaS applications, and enterprise systems
  • Develop automation using technologies such as PowerShell, Microsoft Graph, REST APIs, and Python.
  • Partner with Security Operations and Security Engineering to monitor, investigate, and remediate identity-related security risks.
  • Maintain identity and access controls supporting organizational security and compliance requirements

  Requirements

  • 5+ years of professional relative experience
  • Experience in Identity and Access Management, Identity Governance, Security Engineering, or a related discipline
  • Strong hands-on experience administering and engineering Microsoft Active Directory
  • Strong hands-on experience with Microsoft Entra ID / Azure AD and hybrid identity environments
  • Experience managing Conditional Access, MFA, authentication methods, and privileged access
  • Experience with identity lifecycle management, RBAC, least privilege, access reviews, and entitlement governance
  • Experience with enterprise authentication and federation technologies such as SAML, OAuth 2.0, OpenID Connect, and SCIM
  • Experience with scripting and automation using PowerShell and APIs.
  • Working knowledge of PKI, X.509 certificates, and certificate-based authentication
  • Strong troubleshooting, documentation, and communication skills

  Skills

  • Experience with Microsoft Entra ID Governance, including Entitlement Management, Access Reviews, Lifecycle Workflows, and PIM
  • Experience with Entra certificate-based authentication, Active Directory certificate authentication, 802.1X/EAP-TLS, and user/device certificates
  • Experience with enterprise PAM technologies.
  • Experience governing identity and access across Azure, AWS, and SaaS environments
  • Experience with B2B/external identity and non-human identity governance
  • Experience securing Active Directory and Entra ID against identity-based attacks
  • Experience with SIEM and identity security monitoring
  • Experience working in aerospace, defense, government contracting, or another regulated industry
  • Familiarity with CMMC, NIST SP 800-171, NIST SP 800-172, or NIST SP 800-53

  Benefits

  In addition to base salary, for full-time hires, you may also be eligible for long-term incentives, in the form of stock options, and access to medical, vision & dental coverage as well as access to a 401(k) retirement plan.

  Pay

  $140,000 - $180,000 / year. Compensation bands are determined by role