Identity & Access Management (IAM) Ops Engineer

Responsibilities

• Provide operational support for Microsoft Entra ID (Azure AD) and IAM services, including user lifecycle management and access requests.
• Support Conditional Access, MFA, PIM, and access policy enforcement.
• Monitor and respond to identity-related incidents, alerts, and service degradations.
• Support Active Directory (on-prem and hybrid) operations and troubleshoot authentication issues involving DNS, certificates, and Kerberos.
• Manage PKI operations, including certificate issuance, renewal, and lifecycle management.
• Use PowerShell scripting for bulk operations, access updates, and operational automation.
• Provide operational support for Microsoft 365 services, including Exchange Online, SharePoint, OneDrive, and Microsoft Teams.

Requirements

• 6–7 years of experience in IAM, Entra, or Microsoft identity operations.
• Proven experience with Active Directory and hybrid identity environments.
• Strong PowerShell scripting skills for automation and tooling.
• Solid knowledge of PKI, certificate services, and certificate lifecycle management.
• Hands-on experience with Privileged Identity Management (PIM).
• Expertise in SSO, SCIM provisioning, and modern authentication protocols (OAuth, OIDC, SAML).
• Experience with enterprise DHCP, GPO, and DNS administration.
• Ability to work in a shift-based operational model.

Preferred Qualifications

• Experience supporting Microsoft 365 services (Exchange Online, SharePoint, Teams).
• Experience with Microsoft Purview operational tasks.

Benefits

• Health and well-being programs.
• Employee-exclusive discounts on Invisalign products.
• Access to online learning resources and individual development support.
• An inclusive, global workplace culture.

About the Company

Align Technology is a global community of game-changers dedicated to transforming smiles and changing lives. We are a leader in the industry, driven by our core values of agility, customer focus, and accountability.