At Stefanini we are more than 30,000 geniuses, connected from more than 40 countries, we co-create a better future.

Azure Identity & Access Management Engineer
Requirements

5 years of relevant engineering experience, preferably in enterprise IT infrastructure, cloud engineering, identity management, or cybersecurity.

Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent practical experience. A master's degree is preferred.

Strong hands-on experience with Microsoft Azure Active Directory (Azure AD / Microsoft Entra ID), Azure AD Connect, PTA, PHS, and hybrid identity environments.

Solid knowledge of identity and access management, including RBAC, PIM, MFA, Microsoft Authenticator, and Conditional Access policies.

Experience with Microsoft Intune, endpoint management, device enrollment, compliance policies, and Azure AD Join / Hybrid Azure AD Join.

Working knowledge of Azure governance and infrastructure automation, including Azure Policies, ARM templates, Bicep, and Terraform.

Strong analytical, troubleshooting, and root cause analysis skills, with demonstrated experience implementing operational improvements and technical changes.

Experience working in large-scale, complex, or general enterprise environments and collaborating with distributed, cross-functional teams.

Knowledge of cybersecurity principles, enterprise security controls, and compliance requirements is preferred.

Excellent written and verbal communication skills, with the ability to work independently, manage multiple priorities, and provide technical guidance to team members.

Desirable: certifications Azure Administrator Associate, Microsoft Certified: Azure Solutions Architect Expert, and CISSP.





Relevant certifications are preferred, including Microsoft Certified: Azure Administrator Associate, Microsoft Certified: Azure Solutions Architect Expert, and CISSP.

Responsibilities

Design, implement, and maintain Microsoft Azure Active Directory (Azure AD / Microsoft Entra ID) identity and access management solutions across complex enterprise environments.

Configure and manage Azure AD Connect, Pass-Through Authentication (PTA), Password Hash Synchronization (PHS), Azure AD Join, and Hybrid Azure AD Join.

Implement and maintain Role-Based Access Control (RBAC), Privileged Identity Management (PIM), Multi-Factor Authentication (MFA), Microsoft Authenticator, and Conditional Access policies.

Manage Microsoft Intune configurations, device compliance policies, endpoint management integrations, Intune RBAC, and identity-related security controls.

Develop and maintain Azure governance and infrastructure-as-code solutions using Azure Policies, Azure Blueprints, Azure Resource Manager (ARM) templates, Bicep, and Terraform.

Analyze and troubleshoot identity, authentication, synchronization, and access-related issues, identify root causes, and implement corrective actions.

Collaborate with cybersecurity, cloud infrastructure, engineering, and business teams to ensure compliance with enterprise security standards and operational requirements.

Identify opportunities to improve identity management processes, strengthen security controls, optimize integrations, and support cloud transformation initiatives.

Provide technical guidance to stakeholders and junior engineers, contribute to architectural decisions, and support the continuous improvement of engineering practices.

#J-18808-Ljbffr

📌 Azure Identity & Access Management Engineer (Ciudad de México)
🏢 Stefanini LATAM
📍 Ciudad de México