IGA Specialist – Microsoft Entra ID & MIM
信息技术服务部门的身份管理解决方案战略实施和优化工作中，我们正在寻找一个经验丰富的身份治理与管理 (IGA) 专业人员。在这个关键角色中，你将设计和管理强大的访问控制框架，确保本地和基于云的身份平台之间的无整合。你的专业知识将对维护安全遵守，自动化复杂的身份工作流程以及监督用户在各种环境中的访问生命周期至关重要。这一职位需要深入了解现代身份协议，并能够将业务要求转化为支持组织增长的安全可扩展技术解决方案。责任 · 构建和维护在场连接 Active Directory 与云环境的同步基础设施使用微软 Entra Connect 和 Cloud Sync. ·开发和部署利用 PowerShell,C#规则扩展以及 SQL Server 来管理复杂的身份逻辑和配置规则的先进自动化脚本。· 设计和执行基于角色的访问控制 (RBAC) 模型，定期进行访问审查，认证活动以及分离职责分析以减轻风险。· 实施并管理安全身份联合协议，包括 SAML 2.0,OAuth 2.0,OIDC 和 SCIM,以促进无单次登录体验。· 利用 Microsoft Graph API,Azure Logic Apps 和 Power Automate 来构建定制集成并简化身份操作。· 管理和优化微软身份管理器 (MIM 2016) 和微软入口识别器 (Azure AD) 以确保高可用性和性能。· 评估和集成 SailPoint,Saviynt,CyberArk 和 Okta 等第三方身份平台以创建统一的治理生态系统。· 进行持续监控和访问权限审计，确保遵守内部政策和外部监管标准。要求要求：· 专业经验至少6年以上在身份管理领域，特别是 IT 服务行业内。· 在 Microsoft Entra ID,Azure Active Directory 和 Microsoft Identity Manager (MIM 2016) 中已证明的专业知识。·强大的 Active Directory 熟练度，包括与 Entra Connect 和云同步配置实践经验。· 在 PowerShell 中先进的脚本编写功能，
查看英文原文
IGA Specialist – Microsoft Entra ID & MIM
Summary
We are seeking an experienced Identity Governance and Administration (IGA) professional to lead the strategic implementation and optimization of identity management solutions within our IT Services sector. In this pivotal role, you will design and manage robust access control frameworks, ensuring seamless integration between on-premises and cloud-based identity platforms. Your expertise will be critical in maintaining security compliance, automating complex identity workflows, and overseeing the lifecycle of user access across diverse environments. This position demands a deep understanding of modern identity protocols and the ability to translate business requirements into secure, scalable technical solutions that support organizational growth.
Responsibilities
- Architect and maintain the synchronization infrastructure connecting on-premises Active Directory with cloud environments using Microsoft Entra Connect and Cloud Sync.
- Develop and deploy advanced automation scripts utilizing PowerShell, C# Rules Extensions, and SQL Server to manage complex identity logic and provisioning rules.
- Design and enforce Role-Based Access Control (RBAC) models, conducting regular access reviews, certification campaigns, and segregation of duties (SoD) analysis to mitigate risk.
- Implement and manage secure identity federation protocols, including SAML 2.0, OAuth 2.0, OIDC, and SCIM, to facilitate seamless single sign-on experiences.
- Leverage Microsoft Graph API, Azure Logic Apps, and Power Automate to build custom integrations and streamline identity operations.
- Administer and optimize Microsoft Identity Manager (MIM 2016) and Microsoft Entra ID (Azure AD) to ensure high availability and performance.
- Evaluate and integrate third-party identity platforms such as SailPoint, Saviynt, CyberArk, and Okta to create a unified governance ecosystem.
- Conduct continuous monitoring and auditing of access rights to ensure adherence to internal policies and external regulatory standards.
Requirements
Requirements:
- Minimum of 6+ years of professional experience in identity management, specifically within the IT Services industry.
- Proven expertise in Microsoft Entra ID, Azure Active Directory, and Microsoft Identity Manager (MIM 2016).
- Strong proficiency in Active Directory, including hands-on experience with Entra Connect and Cloud Sync configurations.
- Advanced scripting capabilities in PowerShell, C#, and SQL Server for creating custom rules extensions and automation workflows.
- Deep knowledge of access governance principles, including RBAC, access reviews, certification processes, and SoD analysis.
- Solid understanding of modern authentication and authorization standards, including SAML 2.0, OAuth 2.0, OIDC, and SCIM.
- Experience working with Microsoft Graph API, Azure Logic Apps, and Power Automate for building identity integrations.
- Familiarity with leading IGA and privileged access management tools such as SailPoint, Saviynt, CyberArk, or Okta.
- Ability to operate within a salary range of ₹13-14 lpa, reflecting the seniority and technical depth required for this role.
Originally posted on Himalayas