IAM/RBAC Engineer
Pittsburgh, PA
Category: Engineer
Industry: Financial Services
Reference ID: JN -082026-108173
Date Posted: 08/04/2026
Shortcut: http://careers.eliassen.com/jZI5fi
Description:
Hybrid 4 days onsite in either Pittsburgh, PA or NYC, NY or Remote
Our client seeks an IAM/RBAC Engineer with deep experience in Microsoft Entra ID and Azure RBAC. The contractor will design, implement, and administer access controls, enforce least-privilege, and support secure, auditable access for privileged and non-privileged users. The role emphasizes scalable identity solutions, strong authenticator management, and consistent access governance and monitoring.
This is a contract to hire opportunity. Applicants must be willing and able to work on a w2 basis and convert to FTE following contract duration. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.
Rate: $80.00 to $90.00/hr. w2
JN -082026-108173
Responsibilities:
- Define and maintain an enterprise role taxonomy across Azure resources.
- Map permissions to roles and enforce least-privilege access via security groups and role assignments.
- Prohibit broad, direct privilege assignments and document role-to-permission mappings and changes.
- Implement JIT workflows for elevated access with approvals and time-bound permissions.
- Establish usage restrictions and configuration norms for VPN, jump hosts, and privileged sessions.
- Define and oversee emergency access procedures, incident notification, and review.
- Configure MFA for privileged roles using strong authenticators such as smartcards or security keys.
- Provision Azure AD administrator roles for services such as SQL where applicable.
- Enforce managed identities for applications and reduce reliance on local service keys.
- Ensure authorized users safeguard issued authenticators and follow secret hygiene.
- Prevent unencrypted, embedded static credentials in code, images, and configurations.
- Author and maintain policies, standards, and operating procedures for access controls.
- Conduct periodic access reviews and support audit evidence collection.
- Maintain inventories of assets and data with baseline configurations per configuration management practices.
- Configure Azure-native monitoring and logging for identity and access events.
- Route alerts to service owners and security teams and support audit readiness.
- Validate use of emergency access through incident workflows and post-event reviews.
Experience Requirements:
- Advanced knowledge of Microsoft Entra ID, Azure RBAC, security groups, PIM, and JIT access workflows.
- Hands-on experience with Azure Policy and resource configurations, including managed identities and Azure AD admin role provisioning.
- Familiarity with Azure monitoring and logging, AAA concepts, and integration with approval workflow tools.
- Strong understanding of least-privilege access design and access control best practices in Azure.
- Competence in baseline configuration management and accurate asset and data inventories.
- Demonstrated experience implementing least-privilege at scale and articulating Azure RBAC rationale.
- Ability to author and maintain IAM policies and procedures, perform access reviews, and support audits.
- Proven capability to implement and govern remote and elevated access and emergency access processes.
- Strong communication and documentation skills for technical writing and stakeholder coordination.
- Ability to collaborate across engineering, security, and operations teams for compliant access practices.
- Nice-to-have: Experience integrating identity workflows with approval systems and ticketing processes.
- Nice-to-have: Exposure to application identity design patterns and CI/CD secret management controls.
- Nice-to-have: Background in supporting audit readiness for access controls in cloud environments.
Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.
W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.
If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following:
· When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
· Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group.
If you have any indication of fraudulent activity, please contact fraud@eliassen.com.
-
Mid Systems Engineer, CyberArk
Washington, DC
Description: Onsite in Washington, DC Our client seeks a Mid Systems Engineer, CyberArk, to support a Privileged Access Management program for a federal environment. The role will assist senior engineers with CyberArk deployment, operations, reporting,...
Date Posted: 07/11/2026 Recommended
-
Principal Software Engineer
Los Angeles, CA
Description: On-site in Los Angeles, CA Our client seeks a Principal Software Engineer to lead backend services and APIs for a payment processing platform supporting prominent technology partners. The role will drive technical leadership across release...
Date Posted: 08/08/2026 Recommended
-
Senior Database Engineer
Washington, DC
Description: On-site in Washington, DC Our client seeks a Senior Database Engineer to lead enterprise PostgreSQL and MySQL database environments across on-premises and AWS cloud. The role includes installation, configuration, maintenance, replication, ...
Date Posted: 07/15/2026 Recommended
-
Cloud Database Reliability Engineer
St. Louis, MO
Description: Hybrid 2-3 days in office/week in St. Louis, MO Our client seeks a Cloud Database Reliability Engineer to design, build, and evolve automated database infrastructure for a cloud-native enterprise platform supporting mission-critical applic...
Date Posted: 07/16/2026 Recommended
-
Systems Administrator – Enterprise IT Operations
Arlington, VA
Description: On-site in Arlington, VA Our client seeks a Systems Administrator to support, secure, and optimize enterprise IT operations. The role covers end-user system support and endpoint deployment across Mac, Windows, and Linux. The administrator ...
Date Posted: 07/20/2026 Recommended
-
Systems Administrator – Enterprise IT Operations
Frisco, TX
Description: On-site 5 days/week in Frisco, TX Our client seeks a Systems Administrator to support, secure, and optimize enterprise IT operations. The role focuses on end-user support and endpoint deployment across Mac, Windows, and Linux, with respons...
Date Posted: 07/20/2026 Recommended
-
Senior Data Engineer
Chicago, IL
Description: Hybrid At least 2 days per week in office in Chicago, IL Our client seeks a Senior Data Engineer to design, build, and operate large-scale data processing for attribution, measurement, forecasting, and privacy-preserving analytics. You wil...
Date Posted: 07/15/2026 Recommended
-
Okta/IAM
Culver City, CA
Description: Hybrid 4 days onsite in Culver City, CA Our client seeks an Okta/IAM subject matter expert to lead identity and access management strategy, architecture, integrations, and governance. The role will design scalable solutions, enforce polici...
Date Posted: 07/12/2026 Recommended
-
SailPoint Senior Systems Engineer
Washington, DC
Description: On-site in Washington, DC Our client seeks a SailPoint Senior Systems Engineer to enhance cybersecurity and identity management capabilities. The role will coordinate with external stakeholders, including DHS CISA integrators, to implement...
Date Posted: 08/04/2026 Recommended
-
Senior Software Engineer
Pittsburgh, PA
Description: Hybrid 4 days onsite in Pittsburgh, PA Our client seeks a Senior Software Engineer to build a secure, fault-tolerant Azure-based platform for high-volume data ingestion, ledger-style recordkeeping, and analytics for a small internal user b...
Date Posted: 07/20/2026 Recommended
-
Senior Database Engineer
Washington, DC
Description: On-site in Washington, DC Our client seeks a Senior Database Engineer responsible for installation, configuration, maintenance, and performance tuning of Microsoft SQL Server databases while supporting enterprise open-source data platforms...
Date Posted: 07/18/2026 Recommended
-
Systems Administrator – Enterprise IT Operations
San Diego, CA
Description: On-site in San Diego, CA Our client seeks a Systems Administrator to support, secure, and optimize enterprise IT operations. The role includes end-user system support and endpoint deployment for a modern, scalable, and secure environment. ...
Date Posted: 07/20/2026 Recommended
-
Lead Data Engineer
Chicago, IL
Description: Hybrid At least 2 days per week in office in Chicago, IL Our client seeks a Lead Data Engineer to design, build, and optimize large-scale data processing for attribution, measurement, forecasting, and privacy-preserving analytics. The role...
Date Posted: 07/11/2026 Recommended
-
Product Data Analyst
Westlake, TX
Description: Hybrid Every Other Week onsite / 5 days in either Westlake, TX or Merrimack, NH or Durham, NC Our client has an opportunity for a Product Data Analyst to support Stock Plan Services Customer Solutions. The role blends business analysis, da...
Date Posted: 07/12/2026 Recommended
-
Snowflake Developer – .NET / SSIS
4100 Coca Cola Plaza
Description: Hybrid 4/1 in Charlotte, NC Our client seeks a Snowflake Developer with .NET / SSIS to design and deliver enterprise integrations, ETL pipelines, and API-based solutions supporting Sales, Service, and Distribution. The role emphasizes Snow...
Date Posted: 08/09/2026 Recommended
-
P2 Application Support Engineer
Austin, TX
Description: Hybrid Monday - Thursday. Friday is remote in Austin, TX Our client seeks a P2 Application Support Engineer to join a second-level support team responsible for stability, reliability, and performance of a financial technology platform supp...
Date Posted: 08/02/2026 Recommended
-
Product Manager – Agentic AI, HR Technology
Anywhere
Description: Remote Our client is seeking a Product Manager with experience in HR Technology and Agentic AI to drive the design, prioritization, and delivery of AI-powered workforce and employee experience solutions. This individual will serve as the b...
Date Posted: 07/24/2026 Recommended
-
Senior Oracle Fusion GL Security & Technical Consultant
Dallas, TX
Description: On-site in Dallas, TX Our client seeks a hands-on senior Oracle Fusion GL Security and Technical Consultant to stabilize the Oracle security model, correct role and user-assignment issues, resolve production and hypercare tickets, and help...
Date Posted: 08/06/2026 Recommended
-
Email Cyber Security Engineer
Rockville, MD
Description: Hybrid 3 days onsite / 2 days remote in either Rockville, MD or Tysons Corner, VA Our client seeks a Security Engineer responsible for designing, implementing, and maintaining controls that protect enterprise systems and data from unauthor...
Date Posted: 07/28/2026 Recommended
-
PACS Admin
Charlotte, NC
Description: Hybrid 3 on in Charlotte, NC Our client is seeking a PACS Administrator to administer and support enterprise physical access control systems that protect people, facilities, and assets. The role focuses on AMAG Symmetry and comparable PACS...
Date Posted: 08/03/2026 Recommended
-
Lead Software Engineer
Boston, MA
Description: Hybrid at least 2 days per week in office in Wakefield, MA Our client seeks a Lead Software Engineer for the CDP team to drive design, delivery, technical strategy, and execution for critical data systems. You will define engineering stand...
Date Posted: 07/11/2026 Recommended
-
EHR/EMR Trainer
Anywhere
Description: Remote Our client seeks an EHR Trainer to develop, maintain, and deliver general training content and documentation for healthcare software users. The role emphasizes creation and upkeep of user guides, in-app job aids, and virtual trainin...
Date Posted: 07/28/2026 Recommended
-
Business Analyst III
Englewood, CO
Description: Hybrid 4 onsite / 1 work from home in Denver, CO Our client seeks a Business Analyst III to support the maintenance domain within TechMobile, a mobile platform serving more than 20,000 field technicians. The analyst will manage requirement...
Date Posted: 07/12/2026 Recommended
-
Senior Data Engineer
Anywhere
Description: Remote Our client is seeking a Senior Data Engineer with hands-on VaultSpeed experience to support and improve the enterprise data integration platform. The role focuses on developing, maintaining, troubleshooting, and optimizing data pipe...
Date Posted: 07/20/2026 Recommended
-
Infrastructure Project Manager
Anywhere
Description: Remote Our client is seeking an Infrastructure Project Manager to support the information security function and broader infrastructure initiatives. The role will partner with stakeholders across business and technology to define scope, man...
Date Posted: 07/22/2026 Recommended
-
Senior Snowflake Technical Lead / Architect
Orlando, FL
Description: Hybrid 4 Days a week on-site in either Orlando, FL or Burbank, CA or Seattle, WA or New York, NY Our client has an opportunity for a Senior Snowflake Technical Lead / Architect to serve as the technical authority for Snowflake platform str...
Date Posted: 07/16/2026 Recommended
-
Research Data Architect
St. Louis, MO
Description: Hybrid 4 days on-site, 1 day work from home in St. Louis, MO Our client seeks a Research Data Architect to design and modernize data architecture supporting prominent research platforms, including FRED. The role will define scalable data p...
Date Posted: 07/27/2026 Recommended
-
Lead Software Engineer
Chicago, IL
Description: Hybrid At least 2 days per week in office in Chicago, IL Our client seeks a Lead Software Engineer to drive the design, delivery, and technical strategy for cloud-native data platforms within a Customer Data Platform team. The role will de...
Date Posted: 07/11/2026 Recommended
-
Lead Software Engineer
Irving, TX
Description: Hybrid At least 2 days per week in office in Irving, TX Our client seeks a Lead Software Engineer to drive design, delivery, and technical strategy for cloud-native data platforms that power data-driven, omnichannel experiences. You will l...
Date Posted: 07/11/2026 Recommended
-
Senior Software Engineer
Chicago, IL
Description: Hybrid At least 2 days per week in office in Chicago, IL Our client seeks a Senior Software Engineer for the CDP team to drive design, delivery, technical strategy, and execution for cloud-native data platforms. You will define engineering...
Date Posted: 07/15/2026 Recommended
Eliassen Group is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status. Eliassen Group’s Affirmative Action Plan (AAP) is available for inspection by any employee or applicant for employment upon request, during normal business hours of Monday through Friday, 8:30am to 5:30pm EST. Interested persons should contact Phaedra Wells at pwells@eliassen.com for assistance. It is unlawful in Massachusetts and Maryland to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Applicants with disabilities that believe they require an accommodation or assistance with a position, please email our HR team at hradmin@eliassen.com. This email inbox is designed exclusively to assist job seekers whose disability prevents them from being able to apply online. Emails sent for other purposes will not receive a response.
Please be advised that a number of fraudulent job postings have been released under the Eliassen Group brand.
Unfortunately, fraudulent job postings can happen. If anyone reaches out to you about an open position connected with Eliassen Group, never provide personal or financial information to anyone who is not clearly associated with Eliassen Group
If anyone seemingly from Eliassen Group has ever requested this personal information in the past or does so in the future, please contact fraud@eliassen.com.
Please ensure that you are working directly with us by confirming the following:
- When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
- Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group, as indicated above