Description
Charles River Associates is a leading global consulting firm that provides economic, financial, and business management expertise to major law firms, corporations, and governments around the world.
The Senior Identity Access Management Engineer is responsible for the design, implementation, and operational support of enterprise identity and access management solutions with a primary focus on the Microsoft Entra platform.
Responsibilities
- Identity Platform Engineering: Design, implement, and maintain enterprise identity solutions across Microsoft Entra ID, Active Directory, and hybrid identity environments
- Architecture secure authentication and authorization services leveraging Entra ID, Conditional Access, Identity Protection, MFA, and Privileged Identity Management (PIM)
- Automation & Identity Lifecycle Management: Develop and maintain automation solutions using PowerShell, Azure rest APIs, Graph, and JWT tokens
- Automate identity provisioning, deprovisioning, access certification, credential rotation, and governance processes
- Create integrations with enterprise systems to improve identity operations and reduce manual administration
- Cloud Enablement, Operations & Support: Provide operational support for Microsoft Entra and Active Directory services, ensuring availability, reliability, and security
- Monitor, troubleshoot, and resolve complex identity, authentication, synchronization, and access-related issues
- Collaborate with Cloud, Infrastructure, Security, and Application teams to onboard and secure enterprise applications
- Identity Security, Governance & Compliance: Establish and maintain identity security standards, operational procedures, and access control policies
- Support audit, compliance, and regulatory requirements through effective identity governance and privileged access controls
- Identify and remediate identity-related risks in alignment with Zero Trust and Microsoft security best practices
Desired Qualifications
- Bachelor's degree (Master's desirable) in Computer Science, Information Systems or related discipline
- 8-10 years of prior hands-on professional experience with the most recent years as an IAM Engineer
- Proven experience in designing, deploying, and managing an enterprise PAM environment with specialized knowledge related to Thycotic, CyberArk, or Microsoft privileged access solutions
- Automated identity lifecycle processes using PowerShell, Microsoft Graph API, Azure Automation, Logic Apps, or related automation platforms
- Implemented and supported Microsoft Entra ID, Entra ID Governance, Privileged Identity Management (PIM), and Conditional Access policies in enterprise-scale environments
- Hands-on experience with hybrid identity architectures, including Active Directory Domain Services (AD DS), Entra Connect, Cloud Sync, and federated authentication services
- Experience implementing and managing Single Sign-On (SSO) integrations using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM
- Demonstrated ability in removing standing privilege by leveraging just-in-time access or other dynamic elevation models
- Hands-on experience with cloud migrations while managing complex hybrid Active Directory environments
- Knowledge of regulatory and security frameworks including NIST, CIS Controls, ISO 27001, and Zero Trust security standards
Benefits
- CRA’s robust skills development programs, encompassing both formal and informal programs
- Comprehensive total rewards program including a superior benefits package, wellness programming, and in-house immigration support for foreign nationals and international business travelers