Identity and Access Management (IAM) Expert

Job Description

Job Title: Identity and Access Management (IAM) Expert Active Directory, Azure AD & Office 365 Job Summary: We are seeking an experienced and knowledgeable Identity and Access Management (IAM) Expert to join our team. The ideal candidate will have deep expertise in Active Directory (AD), Azure Active Directory (Azure AD), and Office 365. This role requires not only a high level of technical expertise but also the ability to support and guide non-expert team members in resolving IAM-related issues on a daily basis. The IAM expert will be instrumental in the smooth operation of our identity management systems and will help in troubleshooting, policy enforcement, and user access management. Key Responsibilities: Provide expert-level guidance on Active Directory (AD) configuration, management, and troubleshooting. Implement, maintain, and support Azure Active Directory (Azure AD) configurations, including Conditional Access, Identity Protection, and Multi-Factor Authentication Administer and configure Office 365 services, including Exchange Online, SharePoint, Teams, and OneDrive for Business, ensuring proper integration with AD and Azure AD. Support the onboarding and offboarding processes for users, ensuring proper provisioning and de-provisioning of access to all systems. Troubleshoot complex IAM-related issues across Active Directory, Azure AD, and Office 365, working with various teams to resolve access issues. Provide expert advice on best practices for IAM security, including user authentication, role-based access control (RBAC), and least privilege access. Assist in IAM-related audits and compliance activities, ensuring that systems are aligned with company policies and regulatory requirements. Train and mentor non-expert team members on IAM tools, processes, and troubleshooting. Document IAM policies, procedures, and troubleshooting guides to support internal knowledge sharing. Collaborate with IT, security, and business teams to design and implement IAM solutions that align with organizational needs. Required Skills and Qualifications: Proven experience working with Active Directory (AD), including group policies, user/group management, DNS, and replication. Strong knowledge of Azure Active Directory (Azure AD), including user provisioning, conditional access policies, MFA, self-service password reset, and directory synchronization. Experience with Office 365 administration, including Exchange Online, SharePoint Online, Teams, OneDrive, and other Microsoft 365 applications. In-depth understanding of IAM principles such as RBAC (Role-Based Access Control) least privilege access, and multi-factor authentication. Hands-on experience with user lifecycle management, including onboarding, offboarding, and role changes in both AD and Azure AD. Ability to diagnose and resolve complex IAM-related issues across multiple platforms (AD, Azure AD, Office 365). Proficiency in troubleshooting authentication issues, including Kerberos, SSO, SAML, and OAuth. Experience with Azure AD Connect and hybrid identity management solutions. Strong understanding of IAM security and compliance, including regulatory frameworks (e.g., GDPR, HIPAA). Experience in scripting and automation (e.g., PowerShell) for IAM tasks. Ability to work effectively with cross-functional teams and mentor junior team members. Excellent communication skills, both verbal and written, with the ability to explain complex concepts to non-technical stakeholders. Preferred Qualifications: Certifications in IAM or Microsoft technologies (e.g., Microsoft Certified: Azure Identity and Access Administrator Associate, Certified Identity and Access Manager (CIAM), etc.) Familiarity with third-party IAM tools and solutions. Experience with Identity Governance and Administration (IGA) solutions. Experience working in hybrid cloud environments and integrating on-premise and cloud-based IAM systems