Cybersecurity IAM Engineer (Microsoft Entra ID)

Location: Plano, Texas office Monday through Friday, with travel between locations as needed for transformation and governance activities.

Company

hirify.global provides technology-driven financial solutions through brands including Rent-A-Center, Acima, and Brigit across store-based and digital retail channels.

What you will do

• Design, implement, and manage Microsoft Entra ID environments, including Conditional Access, MFA, passwordless authentication, Identity Protection, PIM, RBAC, entitlement management, access reviews, and hybrid identity.
• Automate identity lifecycle management and provisioning through Entra ID, SCIM integrations, custom pipelines, HRIS platforms, and business applications.
• Implement SSO integrations using SAML 2.0, OAuth 2.0, and OpenID Connect, and secure Azure Container Apps with managed identities, secrets management, ingress controls, network isolation, and Dapr security.
• Maintain IAM infrastructure as code and CI/CD security pipelines using Terraform and GitHub Actions across Azure resources and identity controls.
• Develop Go backend services and React administrative integrations, while automating with Bash, PowerShell, RegEx, and Python and querying databases with SQL.
• Monitor identity threats, support incident response, document security standards and runbooks, advise cross-functional teams, and evaluate IAM modernization opportunities including AI-driven tools.

Requirements

• Bachelor’s degree in computer science, cybersecurity, information systems, or a related field, or equivalent professional experience.
• 8+ years of progressive cybersecurity experience, including 5–6 years focused on Identity & Access Management.
• Deep hands-on Microsoft Entra ID expertise covering Conditional Access, Identity Protection, PIM, RBAC, application registrations, and AD Connect or Cloud Sync.
• Experience with Azure Container Apps or similar Azure container services, managed identity integration, secrets management, and Cosmos DB for logic and translation rules.
• Experience building backend services, APIs, and IAM provisioning workflows with Go, and modern administrative interfaces and HRIS integrations with React.
• Strong experience with REST API, JSON, XML, and C#; Terraform; GitHub; and GitHub Actions for infrastructure, source control, CI/CD, testing, and deployment.
• Understanding of SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, FIDO2, and Zero Trust architecture principles.
• Proficiency in AI-driven security, including LLMs, MCP, RAG, model architectures, and enterprise security controls.
• Excellent communication skills for explaining complex security topics to diverse stakeholders.

Nice to have

• Microsoft certifications including SC-300, AZ-500, or SC-100, and industry certifications such as CISSP, CCSP, CIAM, Security+, or CySA+.
• Experience with Okta, Ping Identity, SailPoint, Workday RaaS integrations, SIEM/SOAR platforms, PKI, certificate-based authentication, and credential lifecycle management.
• Knowledge of NIST CSF, NIST AI RMF, or PCI DSS as applied to identity and access controls.
• Experience with multi-tenant or multi-entity Azure environments, cross-tenant federation, and B2B collaboration.

Culture & Benefits

• Full-time position with regular office attendance and travel between locations as required.
• Cross-functional collaboration with Engineering, IT, Compliance, Platform Engineering, and business teams.
• hirify.global is an equal opportunity employer committed to inclusive, non-discriminatory employment practices.
• U.S. work authorization is required; employment-based immigration sponsorship, including OPT and CPT, is not offered.