Senior Identity & Access Management (IAM) Engineer (Microsoft Entra ID)

Location: Remote; candidates must reside in the United States Eastern Time Zone

Salary: $130,000–$180,000 annually, plus eligibility for variable cash programs and, for eligible roles, equity.

Company

hirify.global develops technologies and solutions for bioprocessing and the production of biologic drugs.

What you will do

• Own the engineering, administration, governance, and continuous improvement of enterprise identity and access management services.
• Serve as the technical owner for Microsoft Entra ID, including Conditional Access, MFA, Identity Protection, passwordless authentication, and identity governance.
• Design and support SSO, authentication, authorization, enterprise application onboarding, and identity integrations across cloud and on-premises environments.
• Automate Joiner, Mover, and Leaver workflows, provisioning, access reviews, entitlement management, and governance reporting.
• Administer privileged access controls, RBAC, PKI, certificate lifecycle management, certificate-based authentication, and network access services.
• Support compliance, incident response, root cause analysis, technical documentation, platform monitoring, and mentorship for IT teams and application owners.

Requirements

• Bachelor’s degree in IT, Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent experience.
• At least 7 years of hands-on IAM experience in a medium or large enterprise environment.
• Deep expertise with Microsoft Entra ID, hybrid Microsoft Active Directory environments, identity lifecycle management, access governance, PIM, RBAC, access reviews, and entitlement certification.
• Strong experience with SAML, OAuth, OpenID Connect, LDAP, Kerberos, SCIM, automated JML processes, and enterprise SaaS integrations.
• Experience with enterprise PKI, Microsoft AD CS, certificate lifecycle management, and certificate-based authentication.
• Strong PowerShell scripting, Microsoft Graph API, troubleshooting, analytical, communication, and documentation skills; experience supporting global organizations.

Nice to have

• Experience with Beyond Identity, Okta, Duo, Ping Identity, CyberArk, SailPoint, Saviynt, or similar platforms.
• Microsoft SC-300, SC-100, or equivalent certifications.

Culture & Benefits

• Remote work within the required Eastern Time Zone location.
• Paid time off, health, dental, and vision coverage.
• Retirement benefits and flexible spending accounts.
• Eligibility for variable cash programs and equity for eligible roles.