Assistant Manager - Identity and Access Management Implementation

JD: Entra ID 

Job Summary:

Seeking highly skilled and experienced Microsoft Entra ID (Identity Governance and Administration + SSO + MFA + CA + Identity protection + Access Management) capabilities for Automation/management of Identity and Access Management. Responsible for designing, implementing, and managing identity and access management solutions using Microsoft Entra ID. This role requires a deep understanding of identity governance, lifecycle management, SSO, MFA, CA, Identity Protection, Identity Risk and Azure automation processes to ensure secure and efficient access to organizational resources. 

Responsibilities:

·       Design and implement identity and access management solutions using Microsoft Entra ID.

·       Automate onboarding and offboarding processes to streamline user lifecycle management.

·       Enabling provisioning for SCIM and Non-SCIM based applications in a Hybrid (On-prem + Cloud) environment.

·       Implement and manage user identities, permissions, and access controls.

·       Clear understanding, requirement gathering and onboarding of applications for SSO (SAML, Open ID Connect, OAuth, Header based...etc.). Understanding Kerberos authentication, WS-Fed.

·       Ensure the application of Zero Trust principles for identity and access solutions.

·       Provide seamless user experiences and self-service management capabilities.

·       Plan and implement authentication, authorization, and access management across applications and resources.

·       Implement and manage Entra ID Connect/Entra ID Sync capabilities for integration with various applications and services on-prem/cloud/Saas based applications.

·       Monitor, troubleshoot, and report on identity and access management activities.

·       Perform regular audits to ensure compliance with security policies and standards.

·       Generate and analyze reports on identity and access management metrics.

·       Collaborate with other IT teams to drive strategic identity projects and modernize identity solutions.

·       Stay up to date with the latest Microsoft Entra ID features and best practices.

·       Configure and Support hybrid work environments by ensuring secure and efficient identity and access management design and implementation.

·       Develop and manage lifecycle workflows to automate, customize, and optimize user identity management.

·       Conduct access reviews to ensure proper access control and compliance.

·       Automate Self-Service Password Reset (SSPR) and access request processes to enhance user experience and security. 

Requirements:

·       Proven experience with Microsoft Entra ID, Azure Active Directory, and identity governance.

·       Strong knowledge of identity and access management principles and practices.

·       Experience with automation tools and scripting languages (e.g., PowerShell, Azure Automation, Azure logic apps...etc.).

·       Experience with automation of Provisioning with Saas, on-prem, SCIM/Non-SCIM, Webservice, PowerShell, CSV, disconnected, DB-based connectors/applications.

·       Experience with Entra ID Connect Sync and Entra ID Cloud Sync for application provisioning and service integration.

·       Familiarity with HR systems integration for onboarding and offboarding workflows.

·       Excellent problem-solving and analytical skills.

·       Strong communication and collaboration skills.

·       Extensive working knowledge of lifecycle workflows, access reviews, and automating Self-Service Password Reset (SSPR) for access requests.

·       Deep understanding of Entra ID provisioning services.

·       Requirement gathering, documentation, and end user manuals.

·       Relevant certifications (e.g., Microsoft Certified: Identity and Access Administrator Associate) are a plus.

·       Knowledge of Entra ID Access Management, SSO/Federation concepts, and App-proxy are desirable.

·       Knowledge on ECMA connector development & customization, implementation and management.

·       Complex integrations via Custom workflows through Logic apps.

·       Integration with ITSM for ticketing requirements.

·       Integration with SIEM for log and event management and response.

Skills:

·       Identity and access management

·       Access management/SSO/Application proxy

·       Automation and scripting via PowerShell, logic apps, expressions

·       Entra ID Connect Sync and Entra ID Connect cloud sync

·       User lifecycle management

·       Hybrid work capabilities

·       Reporting and audit

·       Lifecycle workflows

·       Password management

·       Access reviews

·       Self-Service Password Reset (SSPR)

·       Self-Service Access Requests

·       Collaboration and communication

·       Segregation of duties (SOD)

·       Azure Automation, Azure logic apps

·       ECMA custom connector development

·       Excellent Troubleshooting skills

·       Independently driving requirements/solutions, Design and Architecture

·       Excellent client handling and communication

·       Train and provide required enablement to fellow teammates

Certification:

SC-300 (Mandatory)

Any other IAM related certification (Good to have)