Responsibilities
- Architect and implement IAM solutions using Active Directory, LDAP, and Entra ID (Azure AD).
- Lead integration of enterprise and custom applications for authentication and authorization.
- Design and guide refactoring of applications to externalize authorization to AD/Entra ID.
- Define and enforce IAM best practices, security standards, and identity models.
- Support integration using SAML, OAuth, OIDC, and ADFS.
- Provide SME guidance for IAM integrations across COTS and homegrown applications.
- Collaborate with engineering teams on IAM APIs, SDKs, and integration frameworks.
- Support troubleshooting and resolution of complex IAM integration issues.
Required Skills
- 10+ years of IAM / Active Directory experience with 5+ years in architecture roles.
- Strong expertise in Active Directory, LDAP, and Entra ID.
- Experience integrating applications with AD for authentication/authorization.
- Strong understanding of IAM protocols: SAML, OAuth, OIDC, ADFS, RADIUS.
- Experience with SailPoint IGA and enterprise IAM tools.
- Knowledge of AD/Entra ID APIs, SDKs, and integration methods.
- Familiarity with Java, .NET, Python, JavaScript, and PowerShell.
- Understanding of DNS, SMTP, and networking fundamentals.
Preferred Skills
- Experience in enterprise IAM modernization or cloud migration.
- Exposure to large-scale identity governance programs.
- Strong experience in enterprise troubleshooting and production support.