Identity and AccessManagement (IAM) Engineer

M9 Solutions is seeking anIdentity and AccessManagement (IAM) Engineer to work remotely on a government contract for a client located in Washington, DC. An active Top Secret clearance is required.

Responsibilities

• Maintaining ongoing knowledgeand supportof Azure infrastructure and aligned applications, such as:
  
  
  
  • Azure Cloud hosted services, Bastion, Keyvault, Recovery Services Vault, and Storage accounts.
  • Azure Role-Based Access Control (RBAC).
  • Power Automate, App Service Plan, Function Apps, and Application Insights.
  • Azure networking, Vnets, network security groups (NSG), private and public endpoints, and Azure Private DNS.
  • Active Directory Domain Services (AD DS)
  • Kusto Query Language (KQL), Log Analytics, and Azure Databricks.
  • Access reviews, reporting, and audit compliance.
  
  
  
  
• Deploying AD DS on Azure VM and installing replica Domain Controllers or Forests in an Azure virtual network.
• Maintain ongoing knowledge and support ofservers and networks aligned to the Active Directory environments, including but not limited to:
  
  
  
  • Single Sign-On (SSO) configuration and remediation.
  • Native Microsoft tools, including but not limited to ADSI, ADUC, DNS, Domains and Trusts.
  • Public Key Infrastructure (PKI).
  
  
  
  
• Creating and configuring Microsoft Entra Domain Services (IAAS & PAAS) for authenticating applications in Azure Cloud.
• Entra services management, including application proxy, Licensing, and Azure PIM.
• This role may also require the periodic allocation of additional time on the job to support multiple demands and escalating issues or to accommodate teams or staff in other time zones.

Required Skills and Qualifications

• Bachelor's degree in computer science or a related discipline, or equivalent work experience required.
• 5 - 8+ years of cloud infrastructure experience.
• 3+ years ofhands-onexperience in designing and implementingCloudservices likeAzureAD, Entra ID,AzureMFA, EntraConditional Access, Azure B2B, and Azure PIM.
• Understanding of application registration and Key Management using the Entra ID Admin portal.
• Understanding of Entra ID Privileged Roles, Units, and emergency accounts to enable policies at a granular level for access administration.
• Strong organizational skills, self-motivated, and able to work under tight deadlines.
• Strong analytical and problem-solving skills.
• Effective teaming and knowledge sharing skills.
• Advanced skills in planning, designing, and troubleshooting complexcloud environments.
• Solid understanding ofCloudenvironment andsecurity best practices.
• Good understanding of ITIL.
• Exceptional ability to document processes, procedures, and security designs clearly and accurately for distribution to internal teams and customers.
• Understanding of other technologies required to run a secure enterprise-level infrastructure.
• Demonstrated deep expertise incloud infrastructure.
• Experience with writing custom, scripting tools (Python, PowerShell, etc.), interacting with API and shell scripting.
• Excellent interpersonal, communication, and presentation skills.
• Good judgment, tact, and decision-making ability.

Preferred Skills and Qualifications

• Azure certification for implementing Microsoft Azure Infrastructure Solutions.
• Involved in large-scale IT deployments orcloud infrastructure.
• At least one technical certificationinthe Azure platform.