Senior IAM Engineer
cleartech recruitingEnglewood (CO)
About the role
A financial services / wealth management organization is growing its security engineering function and is hiring a hands-on IAM-first security engineer. This role is focused on improving identity programs in a Microsoft/Azure environment.
What you’ll do:
Own and evolve core Identity & Access Management (IAM) capabilities across a Microsoft identity ecosystem Design, implement, and operate identity controls: MFA, Conditional Access, SSO/federation, authorization patterns, and access governance Partner with security leadership and engineering peers to strengthen identity posture and security maturity Build automation/tooling to scale identity operations (Power Shell and/or Python)Contribute to security architecture initiatives (ex: Zero Trust concepts)Must-haves Hands-on IAM engineering experience (implementation + operations; not purely GRC/SOC)Strong experience with Microsoft Entra ID / Azure ADWorking knowledge of MFA, Conditional Access, SSO/federation (SAML/OIDC/OAuth), and access controls Scripting/automation skills: Power Shell and/or Python Comfort working in a fast-paced, high-ownership environment Nice-to-haves Identity governance / IGA (access reviews, joiner-mover-leaver, lifecycle automation)Privileged access concepts (PIM/PAM)Exposure to Zero Trust approaches and/or tools (Zscaler-type platforms)Familiarity with frameworks like NISTLocation / onsite Austin, TX / Chicago, IL / Denver, CO4 days/week onsite
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.
More like this