Sr Engineer, Identity & Access Management
Role Overview
This role designs, implements and continuously improves identity and access management (IAM) capabilities across Microsoft Entra ID, Active Directory and adjacent platforms, with particular focus on role-based access control (RBAC), conditional access, privileged access and identity governance.
The engineer builds automation and agentic AI solutions—such as access-review and role-mining agents—to reduce manual administrative overhead and strengthen the organization’s zero-trust security posture.
The engineer collaborates with security, compliance and platform teams to ensure identity controls align with company policy and applicable regulations.
Key Skills for This Role
Full Job Posting
Required Qualifications
- 7+ years managing or supporting identity and access management, identity governance, or related security platforms
- 3+ years of hands-on experience with Microsoft Entra ID (Azure AD), RBAC design, conditional access and privileged identity management (PIM)
- Demonstrated coding/scripting ability (PowerShell, Python, Microsoft Graph API, or similar) with a track record of building identity automation, integrations and reporting tools
- Hands-on experience designing or deploying agentic AI or automation solutions for identity/access use cases (e.g., role mining, access certification, anomaly detection)
- Experience with identity protocols and standards (SAML, OAuth/OIDC, SCIM) and identity governance/compliance frameworks
- Working knowledge of Generative AI and agentic AI concepts (LLM integration, tool/function calling, retrieval-augmented generation) as applied to identity and security operations
- Ability to write clear technical documentation
Preferred Qualifications
- Experience building or contributing to an internal AI agent/Center of Excellence pod, including agent design and application lifecycle management (ALM) practices
- Experience with Microsoft Copilot Studio or similar low-code AI agent platforms
- Passion for zero-trust security with an awareness of the latest identity and AI trends
- Bachelor’s degree in IT, Computer Science, or related field
- Microsoft Certified: Identity and Access Administrator Associate (SC-300)
- Microsoft Certified: Azure AI Engineer Associate (AI-102) or Copilot Studio/agentic AI certification
- General Performance Criteria
- Expertise: You research, create proof of concepts, and introduce new methods
- Communication: You guide others through problem solving whether it is a technical issue, project impediment, or conflict
- Domain: You guide the delivery of your team to make a positive impact on other parts of the company based on detailed knowledge of the needs of those stakeholders and how those needs are supported by your team
- System: You own relevant segment of systems that are used regularly for the business to function and are well versed in the related KPIs
- Process: You question the status quo in a constructive manner to find areas for the team to improve
- Influence: You regularly make an impact to your entire team
- To ensure a secure hiring process we have implemented several identity verification steps, including submission of a government issued photo ID. We conduct identity verification during interviews, and final interviews may require onsite attendance. All candidates must complete a comprehensive background check, in-person I-9 verification, and may be subject to drug screening prior to employment. The use of artificial intelligence tools during interviews is prohibited and monitored. Misrepresentation will result in immediate disqualification from consideration.
- Employees must have a high-speed broadband internet connection with a minimum speed of 50 Mbps and the ability to set up a wired connection to their home network to ensure effective remote work. These requirements may be updated as needed by the business.
- Evolent is an equal opportunity employer and considers all qualified applicants equally without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, or disability status. If you need reasonable accommodation to access the information provided on this website, please contact [email protected] for further assistance.
- The expected base salary/wage range for this position is $. As part of our total compensation package, Evolent is proud to offer comprehensive benefits (including health insurance benefits) to qualifying employees. All compensation determinations are based on the skills and experience required for the position and commensurate with experience of selected individuals, which may vary above and below the stated amounts.
Preferred Certifications
- As the Sr Engineer, Identity & Access Management, you will be required to fulfill your responsibilities while meeting the following general performance criteria for this position at this level:
- Mandatory Requirements:
About Evolent Health
Public healthcare technology and specialty-care management company helping health plans and providers improve outcomes for complex conditions.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Evolent Health
Lead Workplace Engineer
Pune, IND
Sr Engineer, Digital Workplace Engineering
Pune, IND
Cloud Platform Architect
Pune, IND
Sr SaaS Administrator, Enterprise Applications
Pune, IND
Lead Tech Analyst, HR Information Systems
Pune, IND
Platform Engineer - Internal Developer Platform
Pune, IND
Sr Analyst, ITSM
Pune, IND
Database Administrator
Pune, IND