IAM/Entra ID Admin Full Time NEW

About Client:

Our Client is a global IT services company headquartered in Southborough, Massachusetts, USA. Founded in 1996, with a revenue of $1.8B, with 35,000+ associates worldwide, specializes in digital engineering, and IT services company helping clients modernize their technology infrastructure, adopt cloud and AI solutions, and accelerate innovation. It partners with major firms in banking, healthcare, telecom, and media.

Our Client is known for combining deep industry expertise with agile development practices, enabling scalable and cost-effective digital transformation. The company operates in over 50 locations across more than 25 countries, has delivery centers in Asia, Europe, and North America and is backed by Baring Private Equity Asia.

Job Title : IAM/Entra ID Admin

Key Skills : IAM,Entra ID,Active Directory,SSO,Zero Trust,phishing

Experience : 7-9 Years

Location: Hyderabad , Bangalore ,Chennai , Pune , Gurugram

Education Qualification : Any Graduation

Work Mode : Hybrid

Employment Type : Contract to Hire

Notice Period : Immediate – 10 Days.

Job Description :

Seeking a highly skilled IAM professional with deep expertise in Microsoft Entra ID (Azure AD) to lead enterprise identity modernization initiatives. The role will focus on phishing-resistant authentication, unified access governance, and scalable SSO factory implementations across SaaS, legacy, and modern applications.

This role will play a critical part in Zero Trust transformation, ensuring secure, seamless, and governed access across enterprise ecosystems.

Key Responsibilities:

Identity Architecture & Strategy

• Design and implement modern identity architecture using Microsoft Entra ID
• Lead Unified Access & Governance frameworks (RBAC, ABAC, Conditional Access)
• Define identity standards aligned to Zero Trust principles
• Enable federated identity strategies across multi-cloud and SaaS ecosystems

Phishing-Resistant Authentication Implementation

• Deploy phishing-resistant authentication mechanisms, including:
• Passwordless authentication (FIDO2, passkeys)
• Certificate-based authentication (CBA)
• Device-based trust models
• Implement strong Conditional Access policies
• Integrate identity signals for risk-based authentication

SSO Factory Model Execution

• Build and scale an SSO Factory Model to onboard applications efficiently
• Define reusable onboarding templates and patterns
• Drive automation for application integration lifecycle

SSO Integration Standards:

• OIDC (Preferred): For modern applications
• SAML: Fallback for legacy applications
• SCIM: Automated user provisioning (where vendor-supported)

Application Access Tiering & Governance

Design and implement application tiering model:

• Tier 1: Critical business applications (strictest controls, MFA, monitoring)
• Tier 2: Security-sensitive applications (moderate controls)
• Tier 3: Long-tail SaaS applications (standardized onboarding & governance)

Ensure:

• Access certification and review processes
• Least privilege access enforcement
• Lifecycle-based provisioning/deprovisioning

Federated Access & Identity Integration

• Implement federated identity models (B2B, B2C, partner access)
• Integrate enterprise apps with Microsoft Entra ID
• Enable cross-domain authentication and identity brokering

Automation & Provisioning

• Implement SCIM-based provisioning for SaaS apps
• Automate joiner-mover-leaver (JML) lifecycle
• Integrate identity workflows with ITSM tools (e.g., ServiceNow)

Security & Compliance

• Align IAM practices with industry compliance standards (SOC2, HIPAA, GDPR)
• Conduct identity risk assessments and remediation
• Enable logging, monitoring, and audit readiness.