IAM Automation Engineer

Required Skills & Experience • 4+ years developing, maintaining, and troubleshooting PowerShell automation solutions in enterprise Windows environments, including PowerShell 5.x and PowerShell 7. • Proven ability to convert and modernize legacy VB Scripts into PowerShell, ensuring adherence to coding standards and operational requirements. • Hands-on experience supporting IAM platforms such as Microsoft Active Directory (AD) and Microsoft Entra ID, including identity lifecycle management, user provisioning, and access administration. • Experience developing and supporting automation for account management, operational processes, and infrastructure administration. • Ability to create comprehensive test plans, test cases, and test scripts, ensuring requirements and use cases are fully validated prior to production deployment. • Experience conducting code reviews, validating deliverables, and ensuring quality standards are met before release. • Strong understanding of security hardening, vulnerability remediation, and Microsoft security best practices within AD and Entra ID environments. • Experience working with Microsoft Graph API, RESTful web services, token-based authentication, and API integrations. • Experience with source control and collaboration using Git, including branching, pull requests, and code review workflows. • Experience working with CI/CD tools such as Azure DevOps Pipelines, GitHub Actions, or similar automation platforms. • Familiarity with Windows Scheduled Tasks, Azure Automation, and Azure Logic Apps for orchestration and automation workflows. • Strong analytical, troubleshooting, and documentation skills within a production support environment. • Excellent communication skills with the ability to provide stakeholder updates, create status reports, maintain risk and issue logs, and participate in technical and business discussions. • Experience working with ITSM and change management processes, including ServiceNow or similar ticketing platforms. • Proactive approach, self-sufficient, customer obsession, and bias for action Nice to Have Skills & Experience DSC/Bicep or Terraform for identity infra Familiarity with .NET development and frontend technologies is preferred. Experience refactoring classic VBScript, Perl, or batch files Basic understanding of SailPoint, CyberArk, or other IAM platforms Power BI or Excel-PowerQuery for automation metricsrds Job Description A Fortune 50 client is looking for an IAM Automation Engineer to come join their AD & Entra ID team as they’re looking to modernizing every legacy job, batch file, and PowerShell script that keeps identity operations running. We need one person who can write clean automation and coordinate mini-projects that retire old code, rationalize overlapping tasks, and document the new standard. 40% of your role will be Script Modernization & Development – rewrite VBScript / legacy PS1 jobs into modern, modular PowerShell 7 or Graph-API-based runbooks; introduce error handling, logging, and unit tests. 25% of your role will be Job Rationalization – inventory existing scheduled tasks (Windows Task Scheduler, SQL Agent, Azure Automation, etc.); de-duplicate, merge, and decommission obsolete jobs while keeping SLAs intact. 15% of the job will be Project Coordination – run agile-lite workstreams: backlog grooming, sprint boards, status updates, risk logs; liaise with AD ops, security, and infra teams. 10% will involve CI/CD & Source Control – move scripts to Git/Azure DevOps; set up pipelines for linting, Pester tests, and artifact versioning. 5% of the role will be Documentation & Knowledge Transfer – author SOPs, runbooks, and architecture diagrams; host brown-bag sessions for ops teams. The remaining 5% will be Metrics & Reporting – track job runtimes, failure rates, and time saved; present progress to IAM leadership. This role can be fully remote, however candidates in either the Dallas/Fort Worth area or Chicago would be preferred.