The engineer will perform hands-on configuration, testing, and validation of identity governance workflows under the direction of a lead architect. They will also manage client-facing communications, including participating in working sessions and providing as-built documentation.
Part-Time Consulting IGA Engineer (Entra ID Governance) Remote | Contract (1099) | Part-Time, approximately 20 hours per week | November 1 to January 15 This is a fully remote role.
About the Role
We are looking for an experienced identity governance engineer to carry out the hands-on build of identity governance and administration capabilities in a large enterprise environment. Our lead architect owns the solution design and client relationship. You will work under that direction and handle the configuration, testing, validation, and documentation of identity lifecycle and entitlement management workflows. This is an execution role, not a lead role, but it is client facing. You will join working sessions and status calls, answer questions about the configuration you have built, and be expected to represent the work clearly and professionally. It is well suited to a deeply technical engineer who has done this build work before and is comfortable doing it in front of a client.
Key Responsibilities
Perform discovery of existing identity sources, target systems, and entitlement structures, and document findings and dependencies for the architect
Provide input to the architect on governance design and tool configuration decisions
Configure identity lifecycle workflows covering joiner, mover, and leaver events
Build and configure entitlement management structures including access packages, catalogs, and approval policies
Configure access reviews and certification campaigns, including scope, reviewer assignment, and remediation handling
Configure Conditional Access policies aligned to lifecycle states and access risk
Run test cycles, then validate provisioning and deprovisioning behavior across users, groups, and service accounts
Produce as-built documentation and support administrator training and operational handoff
Required Qualifications
5+ years implementing IGA solutions in enterprise environments, including workflow build, testing, and production rollout
Hands-on experience with Microsoft Entra ID Governance, including identity lifecycle workflows and entitlement management
Detailed working knowledge of joiner, mover, and leaver event patterns and how they translate into automated workflow configuration
Experience configuring Conditional Access policies in an enterprise environment, including how those policies interact with lifecycle events
Experience configuring access reviews and certification campaigns, including scoping and remediation workflows
Working knowledge of on-premises Active Directory as a provisioning target in a hybrid environment, including group and account structures and directory synchronization behavior
Understanding of modern authentication (OIDC, SAML, Kerberos) and access control models (RBAC, PBAC, ABAC)
Working familiarity with Azure environments
Ability to author technical documentation and conduct knowledge transfer sessions
Comfortable on client calls, able to explain configuration decisions and status clearly to both technical and non-technical stakeholders
Preferred Qualifications
Prior work in manufacturing environments
Experience integrating multiple authoritative sources of identity data rather than a single HR system of record
Experience with SuccessFactors inbound provisioning to Entra ID
Experience building custom or API-based provisioning integrations for systems without a native connector
Experience with role modeling or entitlement rationalization
Experience with separation of duties controls and policy enforcement
Bachelor's degree in Computer Science or equivalent training, education, and work experience
Contractor Requirements
Hourly 1099 engagement, approximately 20 hours per week, running November 1 through January 15
Compensated for hours worked. Reduced or paused hours over the holiday period
Must be based in the United States and authorized to work without sponsorship
“I was the first applicant for a remote marketing position that got listed on the company website the same day I applied. Had an interview within 48 hours!”
— Sarah J.
·
Marketing Manager
★★★★★
Verified
