Part-Time Consulting IGA Engineer (Entra ID Governance)
TypeContract
LocationUnited States
Posted2 hours ago
Part-Time Consulting IGA Engineer (Entra ID Governance)
Remote | Contract (1099) | Part-Time, approximately 20 hours per week | November 1 to January 15
This is a fully remote role.About the Role
We are looking for an experienced identity governance engineer to carry out the hands-on build of identity governance and administration capabilities in a large enterprise environment. Our lead architect owns the solution design and client relationship. You will work under that direction and handle the configuration, testing, validation, and documentation of identity lifecycle and entitlement management workflows.
This is an execution role, not a lead role, but it is client facing. You will join working sessions and status calls, answer questions about the configuration you have built, and be expected to represent the work clearly and professionally. It is well suited to a deeply technical engineer who has done this build work before and is comfortable doing it in front of a client.Key Responsibilities
Perform discovery of existing identity sources, target systems, and entitlement structures, and document findings and dependencies for the architect
Provide input to the architect on governance design and tool configuration decisions
Configure identity lifecycle workflows covering joiner, mover, and leaver events
Build and configure entitlement management structures including access packages, catalogs, and approval policies
Configure access reviews and certification campaigns, including scope, reviewer assignment, and remediation handling
Configure Conditional Access policies aligned to lifecycle states and access risk
Run test cycles, then validate provisioning and deprovisioning behavior across users, groups, and service accounts
Produce as-built documentation and support administrator training and operational handoff
Required Qualifications
5+ years implementing IGA solutions in enterprise environments, including workflow build, testing, and production rollout
Hands-on experience with Microsoft Entra ID Governance, including identity lifecycle workflows and entitlement management
Detailed working knowledge of joiner, mover, and leaver event patterns and how they translate into automated workflow configuration
Experience configuring Conditional Access policies in an enterprise environment, including how those policies interact with lifecycle events
Experience configuring access reviews and certification campaigns, including scoping and remediation workflows
Working knowledge of on-premises Active Directory as a provisioning target in a hybrid environment, including group and account structures and directory synchronization behavior
Understanding of modern authentication (OIDC, SAML, Kerberos) and access control models (RBAC, PBAC, ABAC)
Working familiarity with Azure environments
Ability to author technical documentation and conduct knowledge transfer sessions
Comfortable on client calls, able to explain configuration decisions and status clearly to both technical and non-technical stakeholders
Preferred Qualifications
Prior work in manufacturing environments
Experience integrating multiple authoritative sources of identity data rather than a single HR system of record
Experience with SuccessFactors inbound provisioning to Entra ID
Experience building custom or API-based provisioning integrations for systems without a native connector
Experience with role modeling or entitlement rationalization
Experience with separation of duties controls and policy enforcement
Bachelor's degree in Computer Science or equivalent training, education, and work experience
Contractor Requirements
Hourly 1099 engagement, approximately 20 hours per week, running November 1 through January 15
Compensated for hours worked. Reduced or paused hours over the holiday period
Must be based in the United States and authorized to work without sponsorship
Must be able to pass a background check
Originally posted on Himalayas
Remote | Contract (1099) | Part-Time, approximately 20 hours per week | November 1 to January 15
This is a fully remote role.About the Role
We are looking for an experienced identity governance engineer to carry out the hands-on build of identity governance and administration capabilities in a large enterprise environment. Our lead architect owns the solution design and client relationship. You will work under that direction and handle the configuration, testing, validation, and documentation of identity lifecycle and entitlement management workflows.
This is an execution role, not a lead role, but it is client facing. You will join working sessions and status calls, answer questions about the configuration you have built, and be expected to represent the work clearly and professionally. It is well suited to a deeply technical engineer who has done this build work before and is comfortable doing it in front of a client.Key Responsibilities
Perform discovery of existing identity sources, target systems, and entitlement structures, and document findings and dependencies for the architect
Provide input to the architect on governance design and tool configuration decisions
Configure identity lifecycle workflows covering joiner, mover, and leaver events
Build and configure entitlement management structures including access packages, catalogs, and approval policies
Configure access reviews and certification campaigns, including scope, reviewer assignment, and remediation handling
Configure Conditional Access policies aligned to lifecycle states and access risk
Run test cycles, then validate provisioning and deprovisioning behavior across users, groups, and service accounts
Produce as-built documentation and support administrator training and operational handoff
Required Qualifications
5+ years implementing IGA solutions in enterprise environments, including workflow build, testing, and production rollout
Hands-on experience with Microsoft Entra ID Governance, including identity lifecycle workflows and entitlement management
Detailed working knowledge of joiner, mover, and leaver event patterns and how they translate into automated workflow configuration
Experience configuring Conditional Access policies in an enterprise environment, including how those policies interact with lifecycle events
Experience configuring access reviews and certification campaigns, including scoping and remediation workflows
Working knowledge of on-premises Active Directory as a provisioning target in a hybrid environment, including group and account structures and directory synchronization behavior
Understanding of modern authentication (OIDC, SAML, Kerberos) and access control models (RBAC, PBAC, ABAC)
Working familiarity with Azure environments
Ability to author technical documentation and conduct knowledge transfer sessions
Comfortable on client calls, able to explain configuration decisions and status clearly to both technical and non-technical stakeholders
Preferred Qualifications
Prior work in manufacturing environments
Experience integrating multiple authoritative sources of identity data rather than a single HR system of record
Experience with SuccessFactors inbound provisioning to Entra ID
Experience building custom or API-based provisioning integrations for systems without a native connector
Experience with role modeling or entitlement rationalization
Experience with separation of duties controls and policy enforcement
Bachelor's degree in Computer Science or equivalent training, education, and work experience
Contractor Requirements
Hourly 1099 engagement, approximately 20 hours per week, running November 1 through January 15
Compensated for hours worked. Reduced or paused hours over the holiday period
Must be based in the United States and authorized to work without sponsorship
Must be able to pass a background check
Originally posted on Himalayas
Apply on Himalayas →
Job sourced from Himalayas. Applications happen directly on the original platform — we never collect your data.