[Hiring] Part-Time Consulting IGA Engineer @Airitos

Role Description

We are looking for an experienced identity governance engineer to carry out the hands-on build of identity governance and administration capabilities in a large enterprise environment. Our lead architect owns the solution design and client relationship. You will work under that direction and handle the configuration, testing, validation, and documentation of identity lifecycle and entitlement management workflows.

This is an execution role, not a lead role, but it is client facing. You will join working sessions and status calls, answer questions about the configuration you have built, and be expected to represent the work clearly and professionally. It is well suited to a deeply technical engineer who has done this build work before and is comfortable doing it in front of a client.

Key Responsibilities

• Perform discovery of existing identity sources, target systems, and entitlement structures, and document findings and dependencies for the architect
• Provide input to the architect on governance design and tool configuration decisions
• Configure identity lifecycle workflows covering joiner, mover, and leaver events
• Build and configure entitlement management structures including access packages, catalogs, and approval policies
• Configure access reviews and certification campaigns, including scope, reviewer assignment, and remediation handling
• Configure Conditional Access policies aligned to lifecycle states and access risk
• Run test cycles, then validate provisioning and deprovisioning behavior across users, groups, and service accounts
• Produce as-built documentation and support administrator training and operational handoff

Qualifications

• 5+ years implementing IGA solutions in enterprise environments, including workflow build, testing, and production rollout
• Hands-on experience with Microsoft Entra ID Governance, including identity lifecycle workflows and entitlement management
• Detailed working knowledge of joiner, mover, and leaver event patterns and how they translate into automated workflow configuration
• Experience configuring Conditional Access policies in an enterprise environment, including how those policies interact with lifecycle events
• Experience configuring access reviews and certification campaigns, including scoping and remediation workflows
• Working knowledge of on-premises Active Directory as a provisioning target in a hybrid environment, including group and account structures and directory synchronization behavior
• Understanding of modern authentication (OIDC, SAML, Kerberos) and access control models (RBAC, PBAC, ABAC)
• Working familiarity with Azure environments
• Ability to author technical documentation and conduct knowledge transfer sessions
• Comfortable on client calls, able to explain configuration decisions and status clearly to both technical and non-technical stakeholders

Preferred Qualifications

• Prior work in manufacturing environments
• Experience integrating multiple authoritative sources of identity data rather than a single HR system of record
• Experience with SuccessFactors inbound provisioning to Entra ID
• Experience building custom or API-based provisioning integrations for systems without a native connector
• Experience with role modeling or entitlement rationalization
• Experience with separation of duties controls and policy enforcement
• Bachelor's degree in Computer Science or equivalent training, education, and work experience

Requirements

• Hourly 1099 engagement, approximately 20 hours per week, running November 1 through January 15
• Compensated for hours worked. Reduced or paused hours over the holiday period
• Must be based in the United States and authorized to work without sponsorship
• Must be able to pass a background check