IAM ENGINEER Responsibilities and Accountabilities: Design, implement, and manage enterprise IAM solutions using Microsoft Entra ID, including Identity Governance (IGA/JML), Entra ID Protection, Conditional Access, MFA, SSO, and Cyber Ark. Own and operate Joiner‑Mover‑Leaver (JML) lifecycle management using Entra ID Governance features to ensure timely and secure access provisioning and deprovisioning. Configure and manage Entra ID Identity Governance capabilities such as access packages, lifecycle workflows, entitlement management, and access reviews. Design, deploy, and enforce Entra Conditional Access and risk‑based policies using Entra ID Protection, aligned with Zero Trust principles. Lead implementation and support of SSO integrations, MFA, and adaptive authentication across cloud and on‑prem applications. Perform hands‑on administration and operational support for Active Directory, Entra ID (Azure AD), Identity Governance, Identity Protection, and Cyber Ark platforms. Troubleshoot and resolve complex authentication and access issues across Conditional Access, SSO, JML/IGA processes, Cyber Ark, and On‑Prem AD. Configure and maintain Cyber Ark CPM and PSM components to support privileged access use cases. Execute access reviews, certification campaigns, and RBAC reviews to meet governance, audit, and compliance requirements. Monitor and resolve IAM‑related incidents and service requests within defined SLAs, driving stability and security of IAM platforms. Drive automation, process optimization, documentation (SOPs), cross‑team collaboration (HR/IT/Security), audit support, and continuous improvement through awareness of Microsoft Entra enhancements and IAM best practices. Required Qualifications:



13–15+ years of hands‑on experience in Identity and Access Management (IAM) and Privileged Access Management (PAM) within enterprise environments. Strong practical experience with IAM/PAM platforms, including Microsoft Entra ID, Cyber Ark, and Azure SSO. Demonstrated hands‑on expertise in:
Cyber Ark Core PAS: Vault, CPM, PVWA, PSM Microsoft Entra ID (Azure AD): Conditional Access, Identity Protection, and Identity Governance (JML, access reviews) Identity and authentication technologies: Active Directory, LDAP, SAML, OAuth 2.0, Open ID Connect Scripting and automation using Power Shell and/or Python to improve IAM operations Cloud and hybrid environments, including Azure, AWS, and GCP ITSM tools (e.g., Service Now) and incident / service‑request handling Strong experience collaborating with HR, IT, Security, and application teams to support identity lifecycle (JML) and access governance processes. Strong analytical and troubleshooting skills with attention to detail and an engineering mindset. Effective verbal and written communication skills, capable of working with both technical and non‑technical stakeholders. Preferred Qualifications: Strong knowledge of Active Directory, Azure AD (Entra ID), Cyber Ark, SSO, and authentication mechanisms (SAML, OAuth, OIDC). Understanding of IAM governance, RBAC, and compliance standards (ISO 27001, SOX, GDPR). IAM certifications such as below is an advantage.
Cyber Ark Defender (mandatory) Cyber Ark Sentry Cyber Ark CCDE - Core PAS Microsoft Certified: Identity and Access Administrator Associate Supporting technology in healthcare industry experience is an advantage. Hybrid policy: 2 days office work per week (mandatory) Advacend English #J-18808-Ljbffr

📌 Iam engineer (Ciudad de México)
🏢 Turtle Trax
📍 Ciudad de México