Posted 3 months ago
Senior IAM Engineer (Azure Entra ID, Identity Governance , RBAC, PIM)
@ Astra North Infoteck Inc.
Toronto, Ontario
Overview
Astra North Infoteck Inc. is hiring a Senior IAM Engineer to design and run Azure Entra ID identity governance, PIM, Conditional Access and RBAC. The work covers access remediation, break-glass accounts, Defender for Cloud and ServiceNow integration, audits and documentation. The posting requires 5+ years of IAM experience, including 3+ years in Azure and Entra ID.
Responsibilities:
- Design and implement Azure Entra ID identity governance frameworks
- Configure PIM and enforce Conditional Access and MFA
- Manage RBAC assignments and remediate stale or excessive access
- Integrate Defender for Cloud governance with ServiceNow
- Participate in IAM audits, access reviews and compliance reporting
Requirements summary:
- 5+ years of IAM experience, 3+ years in Azure and Entra ID
- Deep knowledge of Azure RBAC, PIM and Conditional Access
- Experience with MFA and authentication methods
- Experience with ServiceNow or ticketing integrations
- SC-300 preferred
Tools & skills
Source and dates
Source type not verified · zoho
- Employer posting date
- 2026-07-27
- First seen by our source
- 2026-10-11
- Source record updated
- 2026-10-11
These dates describe the source record, not a live verification that the employer is still hiring. Check the original posting.
Job details
| Seniority | Senior |
| Department | IT |
| Experience | 5+ years |
| Travel | air: none · ground: none |
| Work setting | Office |
| Position | Mostly sitting |
| Physical demands | physical low · computer high |
| Languages | English |
| Licences & certifications | SC-300 |
Summary and details written by AI from the posting; the employer’s posting is the authority.
Astra North Infoteck Inc.
| Field | Value |
|---|---|
| Open jobs on Jobsy | 427 |
Job Title: Senior IAM Engineer (Azure Entra ID, Identity Governance, PIM, RBAC)
Key Responsibilities
• Design and implement Azure Entra ID (formerly Azure AD) identity governance frameworks
• Configure and manage Privileged Identity Management (PIM) for just-in-time privileged access
• Implement and enforce Conditional Access policies, MFA, and phishing-resistant authentication (FIDO2, Passkeys)
• Manage RBAC role assignments across Azure subscriptions, resource groups, and management groups
• Remediate guest user accounts, stale identities, and excessive permission assignments
• Configure and maintain Break Glass (emergency access) accounts with monitoring and alerting
• Integrate Microsoft Defender for Cloud governance rules with ServiceNow for ticketing workflows
• Support cross-cloud IAM alignment across AWS IAM and OCI IAM where applicable
• Participate in IAM audits, access reviews, and compliance reporting
• Develop IAM runbooks, RBAC mapping documentation, and onboarding guides
Required Qualifications
• 5+ years of IAM experience, with 3+ years in Microsoft Azure / Entra ID
• Deep knowledge of Azure RBAC, PIM, Conditional Access, and Entra ID roles
• Experience with MFA enforcement, authentication methods, and access policies
• Understanding of identity lifecycle management and access certification processes
• Familiarity with Microsoft Defender for Cloud and Secure Score recommendations
• Experience with ServiceNow or ticketing system integrations for IAM workflows
• Microsoft Certified: Identity and Access Administrator (SC-300) preferred
• Strong documentation and stakeholder communication skills
Nice to Have
• Experience with AWS IAM, Organizations, and SCPs
• Knowledge of OCI IAM compartments and policy structures
• Exposure to SASE or Zero Trust Network Access (ZTNA) frameworks
Journal
Only you can see this. Kept on this device, and in your account when you sign in.