Specialist - System Management

Specialist - System Management

Role Summary

The IAM Engineer is responsible for designing implementing and operating identity and access management controls across a Hybrid Active Directory and Microsoft Entra ID environment The role ensures secure leastprivileged and compliant access to onpremises and Azure resources using Conditional Access Azure RBAC and Privileged Identity Management PIM

Key Responsibilities

Hybrid Identity AD Entra ID

Manage onprem Active Directory users groups Kerberos DNS PKI integration

Implement and support Hybrid identity using Entra ID Connect

Troubleshoot authentication sync and hybrid SSO issues

Manage device join Hybrid Entrajoined

Microsoft Entra ID Azure AD

Administer Entra tenant configuration and identity lifecycle

Manage authentication methods MFA passwordless FIDO2 CBA

Handle B2Bguest access and external identities

Monitor signin audit and identity protection logs

Conditional Access

Design and enforce Conditional Access policies MFA device compliance location signin risk

Apply Zero Trust principles

Troubleshoot policy conflicts and authentication failures

Azure RBAC

Design and implement rolebased access models

Manage builtin and custom RBAC roles

Enforce leastprivilege access at subscription resource group and resource level

Periodic access review and remediation

Privileged Identity Management PIM

Configure PIM for Azure roles and Entra roles

Manage eligible vs active assignments approvals MFA and timebound elevation

Conduct access reviews for privileged users

Support incident response for privileged access events