Senior IAM Engineer (Identity and Access Management)

About the Role Valce Talent Solutions is seeking a Senior IAM Engineer to design, implement, and operate enterprise IAM solutions using Microsoft Entra ID, Entra ID Governance, and CyberArk. The role focuses on identity governance, risk-based access, and privileged access management to support Zero Trust across cloud and on‑prem environments. What You'll Do

• Design, implement, and manage enterprise IAM solutions using Microsoft Entra ID (Azure AD), including Identity Governance (IGA/JML), Entra ID Protection, Conditional Access, MFA, SSO, and CyberArk.
• Own and operate Joiner‑Mover‑Leaver (JML) lifecycle management using Entra ID Governance features to ensure timely and secure access provisioning and deprovisioning.
• Configure and manage Entra ID Identity Governance capabilities such as access packages, lifecycle workflows, entitlement management, and access reviews.
• Design, deploy, and enforce Entra Conditional Access and risk‑based policies using Entra ID Protection, aligned with Zero Trust principles.
• Lead implementation and support of SSO integrations, MFA, and adaptive authentication across cloud and‑prem applications.
• Perform hands‑on administration and operational support for Active Directory, Entra ID, Identity Governance, Identity Protection, and CyberArk platforms.
• Troubleshoot and resolve complex authentication and access issues across Conditional Access, SSO, JML/IGA processes, CyberArk, and On‑Prem AD.
• Configure and maintain CyberArk CPM and PSM components to support privileged access use cases.
• Execute access reviews, certification campaigns, and RBAC reviews to meet governance, audit, and compliance requirements.
• Monitor and resolve IAM‑related incidents and service requests within defined SLAs, driving stability and security of IAM platforms.
• Drive automation, process optimization, documentation (SOPs), cross‑team collaboration (HR/IT/Security), audit support, and continuous improvement through awareness of Microsoft Entra enhancements and IAM best practices. What We're Looking For
• 13–15+ years of hands‑on experience in Identity and Access Management (IAM) and Privileged Access Management (PAM) within enterprise environments.
• Strong practical experience with IAM/PAM platforms, including Microsoft Entra ID, CyberArk, and Azure SSO.
• Demonstrated hands‑on expertise in:
• CyberArk Core PAS: Vault, CPM, PSM
• Microsoft Entra ID (Azure AD): Conditional Access, Identity Protection, and Identity Governance (JML, access reviews)
• Identity and authentication technologies: Active Directory, LDAP, SAML, OAuth 2.0, OpenID Connect
• Scripting and automation using PowerShell and/or Python
• Cloud and hybrid environments, including Azure, AWS, and GCP
• ITSM tools (ServiceNow) and incident/service‑request handling
• Strong experience collaborating with HR, IT, Security, and application teams to support identity lifecycle (JML) and access governance processes.
• Strong analytical and troubleshooting skills with attention to detail and an engineering mindset.
• Effective verbal and written communication skills, capable of working with both technical and non‑technical stakeholders. Nice to Have
• Strong knowledge of Active Directory, Azure AD (Entra ID), CyberArk, SSO, and authentication mechanisms (SAML, OAuth, OIDC).
• Understanding of IAM governance, RBAC, and compliance standards (ISO 27001, SOX, GDPR).
• IAM certifications such as below is an advantage. o CyberArk Defender (mandatory) o CyberArk Sentry o CyberArk CCDE - Core PAS o Microsoft Certified: Identity and Access Administrator Associate.
• Supporting technology in healthcare industry experience is an advantage. Compensation & Benefits
• Hybrid policy: 2 days in-office per week (mandatory).
• Location: Mexico City, Mexico (Hybrid role).