Be a part of Stefanini!

At Stefanini we are more than 30,000 geniuses, connected from more than 40 countries, we co-create a better future.

Apply Azure Identity & Access Management Engineer!

Requirements

- 5 years of relevant engineering experience, preferably in enterprise IT infrastructure, cloud engineering, identity management, or cybersecurity.
- Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent practical experience. A master's degree is preferred.
- Strong hands-on experience with Microsoft Azure Active Directory (Azure AD / Microsoft Entra ID), Azure AD Connect, PTA, PHS, and hybrid identity environments.
- Solid knowledge of identity and access management, including RBAC, PIM, MFA, Microsoft Authenticator, and Conditional Access policies.
- Experience with Microsoft Intune, endpoint management, device enrollment, compliance policies, and Azure AD Join / Hybrid Azure AD Join.
- Working knowledge of Azure governance and infrastructure automation, including Azure Policies, ARM templates, Bicep, and Terraform.
- Strong analytical, troubleshooting, and root cause analysis skills, with demonstrated experience implementing operational improvements and technical changes.
- Experience working in large-scale, complex, or integral enterprise environments and collaborating with distributed, cross-functional teams.
- Knowledge of cybersecurity principles, enterprise security controls, and compliance requirements is preferred.
- Excellent written and verbal communication skills, with the ability to work independently, manage multiple priorities, and provide technical guidance to team members.
- Desirable: certifications Azure Administrator Associate, Microsoft Certified: Azure Solutions Architect Expert, and CISSP.
- Intermediate English proficiency.




- Relevant certifications are preferred, including Microsoft Certified: Azure Administrator Associate, Microsoft Certified: Azure Solutions Architect Expert, and CISSP.

Responsibilities

- Design, implement, and maintain Microsoft Azure Active Directory (Azure AD / Microsoft Entra ID) identity and access management solutions across complex enterprise environments.
- Configure and manage Azure AD Connect, Pass-Through Authentication (PTA), Password Hash Synchronization (PHS), Azure AD Join, and Hybrid Azure AD Join.
- Implement and maintain Role-Based Access Control (RBAC), Privileged Identity Management (PIM), Multi-Factor Authentication (MFA), Microsoft Authenticator, and Conditional Access policies.
- Manage Microsoft Intune configurations, device compliance policies, endpoint management integrations, Intune RBAC, and identity-related security controls.
- Develop and maintain Azure governance and infrastructure-as-code solutions using Azure Policies, Azure Blueprints, Azure Resource Manager (ARM) templates, Bicep, and Terraform.
- Analyze and troubleshoot identity, authentication, synchronization, and access-related issues, identify root causes, and implement corrective actions.
- Collaborate with cybersecurity, cloud infrastructure, engineering, and business teams to ensure compliance with enterprise security standards and operational requirements.
- Identify opportunities to improve identity management processes, strengthen security controls, optimize integrations, and support cloud transformation initiatives.
- Provide technical guidance to stakeholders and junior engineers, contribute to architectural decisions, and support the continuous improvement of engineering practices.

What’s in for you?

- Fully remote
- Company Equipment
- Personnel Days
- Multicultural experience
- Path Career
- Mentoring/Learning Platforms

📌 Azure Identity & Access Management Engineer (México)
🏢 Stefanini LATAM
📍 México