Microsoft Entra ID,Azure IAM, Conditional Access,PIM, RBAC,Entitlement

Key Responsibilities

• Design and deliver a governed Azure IAM platform using Microsoft Entra ID as the primary identity control plane.
• Create and manage role-assignable security groups, dynamic user groups, and entitlement management catalogs for different access levels and actor types.
• Build and configure Access Packages with standard and enhanced approval workflows, access expiry, and periodic self-review controls.
• Enable and configure Privileged Identity Management (PIM) for privileged security groups, including MFA enforcement, justification, activation expiry, approval settings, and validation testing.
• Define and implement Azure RBAC assignments across management groups, subscriptions, resource groups, and Azure DevOps projects.
• Develop identity lifecycle workflows for Joiner, Mover, and Leaver scenarios using Microsoft Entra Lifecycle Workflows.
• Integrate automation with Logic Apps and Microsoft Graph API to cancel active PIM sessions during mover or leaver events.
• Design and implement Conditional Access policies for standard sign-in, privileged access activation, and secure administrative operations.
• Create, validate, monitor, and document break-glass accounts with appropriate alerting through Azure Monitor.
• Collaborate with HR, ITSM, security, cloud, and application teams to ensure identity attributes, governance processes, and access workflows are correctly maintained.
• Conduct end-to-end user acceptance testing across all IAM phases and support remediation of defects or gaps.
• Produce technical design documents, configuration guides, operational procedures, and handover documentation.

Required Skills and Experience

• Strong hands-on experience with Microsoft Entra ID, Azure IAM, Conditional Access, PIM, RBAC, and Entitlement Management.
• Experience designing and implementing identity governance solutions across enterprise-scale Azure environments.
• Good understanding of Azure management groups, subscriptions, resource groups, and role assignment models.
• Experience with Microsoft Entra Lifecycle Workflows, access packages, access reviews, and approval-based access provisioning.
• Working knowledge of Microsoft Graph API, Managed Identity, Logic Apps, and automation for identity operations.
• Experience integrating identity processes with HR or ITSM systems, including attribute-driven identity lifecycle automation.
• Ability to design secure privileged access models aligned to least privilege and zero trust principles.
• Experience supporting UAT, validation, troubleshooting, and operational handover for IAM solutions.
• Strong documentation skills, including HLD, LLD, SOPs, configuration guides, and runbooks.
• Excellent communication and stakeholder management skills across technical and business teams.

Preferred Qualifications

• Microsoft certifications such as AZ-104, AZ-305, SC-300, SC-100, or equivalent identity and security certifications.
• Experience delivering cloud foundation, landing zone, or enterprise identity transformation programs.
• Knowledge of Azure DevOps security, project-level permissions, and integration with Entra ID groups.
• Understanding of security frameworks such as Zero Trust, CIS, NIST, ISO 27001, or enterprise security baseline standards.
• Experience working in large enterprise or multi-stakeholder transformation environments.