Senior IAM Engineer

Quick Facts

• Role: Senior IAM Engineer
• Focus: Microsoft identity and access management with Microsoft Entra ID Governance (JML)
• Work mode: Fully remote

Description

You will configure and develop Microsoft Entra ID Governance (JML) processes, integrating entitlement/lifecycle workflows with access packages and policies. You will automate provisioning and identity processes using PowerShell (including Microsoft Graph) and Azure Logic Apps, maintain Entra ID and Active Directory group models and synchronization, and connect applications using SAML/OIDC/SCIM. You will run access review campaigns, support SoD controls, troubleshoot provisioning issues, and create technical documentation for audits.

Responsibilities

• Configure and develop JML processes in Microsoft Entra ID Governance (Lifecycle Workflows, Entitlement Management, catalogs/access packages, access policies)
• Integrate with source systems via REST APIs (inbound provisioning, batch files), including attribute mapping
• Automate identity processes with PowerShell/Microsoft Graph scripts and Azure Logic Apps workflows (including custom extensions for JML processes)
• Design and maintain Entra ID and Active Directory group models and manage their synchronization
• Connect applications to the access granting process using SAML, OIDC, SCIM, and custom integrations
• Run access reviews and support SoD control checks
• Diagnose provisioning problems using logs, Microsoft Graph, and Log Analytics
• Prepare technical documentation and support during audits

Requirements

• Experience in IAM/IGA or Microsoft identity administration with a focus on identity governance and access management
• Practical knowledge of Microsoft Entra ID (enterprise applications, provisioning, dynamic groups, app registrations/permissions, Conditional Access)
• Comprehensive Active Directory administration knowledge: domain controllers, replication and Sites/Services, FSMO roles, trust relationships, GPO, AD-integrated DNS, Kerberos/NTLM
• AD identity management knowledge: OU structure, group model, delegated permissions, synchronization with Entra ID (Entra Connect/Cloud Sync)
• PowerShell skills to build and maintain production scripts (not only run existing ones); Microsoft Graph PowerShell SDK is a plus
• Experience building workflows in Azure Logic Apps or Power Automate
• Ability to work with REST APIs and JSON, including OAuth2 authentication, endpoint testing, and API documentation
• Knowledge of SAML, OIDC/OAuth2, SCIM, and LDAP
• Understanding of least privilege, RBAC, and separation of duties (SoD)
• Skills to create technical documentation

Benefits

• Long-term collaboration; 180–220 PLN net/hour + VAT
• Support for starting and running a business for candidates without prior experience
• Efficient hiring process: two technical interviews with managers, online (each up to 1 hour)
• Fully remote work
• Private medical care and Multisport card
• Modern equipment provided by the company, including software and configuration