IAM ENGINEER

Responsibilities and Accountabilities:
- Design, implement, and manage enterprise IAM solutions using Microsoft Entra ID, including Identity Governance (IGA/JML), Entra ID Protection, Conditional Access, MFA, SSO, and CyberArk.
- Own and operate Joiner‑Mover‑Leaver (JML) lifecycle management using Entra ID Governance features to ensure timely and secure access provisioning and deprovisioning.
- Configure and manage Entra ID Identity Governance capabilities such as access packages, lifecycle workflows, entitlement management, and access reviews.
- Design, deploy, and enforce Entra Conditional Access and risk‑based policies using Entra ID Protection, aligned with Zero Trust principles.
- Lead implementation and support of SSO integrations, MFA, and adaptive authentication across cloud and on‑prem applications.
- Perform hands‑on administration and operational support for Active Directory, Entra ID (Azure AD), Identity Governance, Identity Protection, and CyberArk platforms.
- Troubleshoot and resolve complex authentication and access issues across Conditional Access,



SSO, JML/IGA processes, CyberArk, and On‑Prem AD.
- Configure and maintain CyberArk CPM and PSM components to support privileged access use cases.
- Execute access reviews, certification campaigns, and RBAC reviews to meet governance, audit, and compliance requirements.
- Monitor and resolve IAM‑related incidents and service requests within defined SLAs, driving stability and security of IAM platforms.
- Drive automation, process optimization, documentation (SOPs), cross‑team collaboration (HR/IT/Security), audit support, and continuous improvement through awareness of Microsoft Entra enhancements and IAM best practices.

Required Qualifications:
- 13–15+ years of hands‑on experience in Identity and Access Management (IAM) and Privileged Access Management (PAM) within enterprise environments.
- Strong practical experience with IAM/PAM platforms, including Microsoft Entra ID, CyberArk, and Az

📌 IAM ENGINEER (México)
🏢 Turtle Trax
📍 México