IAM/RBAC Engineer
Pittsburgh, PA
Category: Engineer
Industry: Financial Services
Reference ID: JN -082026-108173
Date Posted: 08/04/2026
Shortcut: http://careers.eliassen.com/jZI5fi
Description:
Hybrid 4 days onsite in either Pittsburgh, PA or NYC, NY or Remote
Our client seeks an IAM/RBAC Engineer with deep experience in Microsoft Entra ID and Azure RBAC. The contractor will design, implement, and administer access controls, enforce least-privilege, and support secure, auditable access for privileged and non-privileged users. The role emphasizes scalable identity solutions, strong authenticator management, and consistent access governance and monitoring.
This is a contract to hire opportunity. Applicants must be willing and able to work on a w2 basis and convert to FTE following contract duration. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.
Rate: $80.00 to $90.00/hr. w2
JN -082026-108173
Responsibilities:
- Define and maintain an enterprise role taxonomy across Azure resources.
- Map permissions to roles and enforce least-privilege access via security groups and role assignments.
- Prohibit broad, direct privilege assignments and document role-to-permission mappings and changes.
- Implement JIT workflows for elevated access with approvals and time-bound permissions.
- Establish usage restrictions and configuration norms for VPN, jump hosts, and privileged sessions.
- Define and oversee emergency access procedures, incident notification, and review.
- Configure MFA for privileged roles using strong authenticators such as smartcards or security keys.
- Provision Azure AD administrator roles for services such as SQL where applicable.
- Enforce managed identities for applications and reduce reliance on local service keys.
- Ensure authorized users safeguard issued authenticators and follow secret hygiene.
- Prevent unencrypted, embedded static credentials in code, images, and configurations.
- Author and maintain policies, standards, and operating procedures for access controls.
- Conduct periodic access reviews and support audit evidence collection.
- Maintain inventories of assets and data with baseline configurations per configuration management practices.
- Configure Azure-native monitoring and logging for identity and access events.
- Route alerts to service owners and security teams and support audit readiness.
- Validate use of emergency access through incident workflows and post-event reviews.
Experience Requirements:
- Advanced knowledge of Microsoft Entra ID, Azure RBAC, security groups, PIM, and JIT access workflows.
- Hands-on experience with Azure Policy and resource configurations, including managed identities and Azure AD admin role provisioning.
- Familiarity with Azure monitoring and logging, AAA concepts, and integration with approval workflow tools.
- Strong understanding of least-privilege access design and access control best practices in Azure.
- Competence in baseline configuration management and accurate asset and data inventories.
- Demonstrated experience implementing least-privilege at scale and articulating Azure RBAC rationale.
- Ability to author and maintain IAM policies and procedures, perform access reviews, and support audits.
- Proven capability to implement and govern remote and elevated access and emergency access processes.
- Strong communication and documentation skills for technical writing and stakeholder coordination.
- Ability to collaborate across engineering, security, and operations teams for compliant access practices.
- Nice-to-have: Experience integrating identity workflows with approval systems and ticketing processes.
- Nice-to-have: Exposure to application identity design patterns and CI/CD secret management controls.
- Nice-to-have: Background in supporting audit readiness for access controls in cloud environments.
Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.
W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.
If anyone reaches out to you about an open position connected with Eliassen Group, please ensure that you are working directly with us by confirming the following:
· When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
· Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group.
If you have any indication of fraudulent activity, please contact fraud@eliassen.com.
-
Microsoft Dynamics CRM Administrator/Developer
St. Louis, MO
Description: Hybrid in St. Louis, MO Our client seeks a Microsoft Dynamics CRM Administrator/Developer to lead technical implementation and serve as system administrator for selected CRM instances. The role will architect, implement, and support Micros...
Date Posted: 08/08/2026 Recommended
-
Senior Security Engineer
Los Angeles, CA
Description: Hybrid Fully Remote until West LA office opens - then 3x a week onsite in Los Angeles, CA Our client is seeking an experienced Senior Security Engineer with a focus on security architecture assessments across on-premises and Azure environm...
Date Posted: 08/20/2026 Recommended
-
Workday Security Architect SME (Workday HCM)
Anywhere
Description: Remote Our client seeks a Workday Security Architect Consultant to assess a mature Workday HCM security environment, identify gaps and best-practice opportunities, and deliver actionable recommendations for a future-state security model. T...
Date Posted: 08/23/2026 Recommended
-
Platform Engineer IV
Greenwood Village, CO
Description: Hybrid 2 onsite / 3 WFH in Greenwood Village, CO Our client has an opportunity for a Platform Engineer to design, build, and maintain the AWS infrastructure that underpins the IIA Data Lake, agent runtime environments, CI/CD pipelines, and...
Date Posted: 08/18/2026 Recommended
-
Senior Software Engineer
Los Angeles, CA
Description: Hybrid: Fully Remote until West LA office opens - then 3x a week onsite in Los Angeles, CA Our client seeks a Senior Software Engineer to build scalable, secure, and resilient platform services. You will design backend services and APIs, e...
Date Posted: 08/11/2026 Recommended
-
Principal Software Engineer
Los Angeles, CA
Description: On-site in Los Angeles, CA Our client seeks a Principal Software Engineer to lead backend services and APIs for a payment processing platform supporting prominent technology partners. The role will drive technical leadership across release...
Date Posted: 08/08/2026 Recommended
-
SQL Server Database SME on AWS/Azure
Washington, DC
Description: On-site in Washington, DC Our client seeks a SQL Database Administrator and Migration Expert to lead migrations from on-premises to AWS and Azure. The role includes installing, configuring, maintaining, and tuning SQL Server across on-prem...
Date Posted: 08/17/2026 Recommended
-
Senior AI Engineer/Databricks Architect
Anywhere
Description: Remote Our client seeks a Senior AI Engineer to design, build, and deploy production-grade AI applications and agentic workflows at scale within the insurance domain. The role requires strong software engineering fundamentals, Databricks e...
Date Posted: 08/12/2026 Recommended
-
AI/ML Engineer
Irvine, CA
Description: On-site 3 days per week in either Irvine, CA or Portland, OR, Austin, TX or Woburn, MA Our client seeks an AI/ML Engineer to design, build, and productionize advanced machine learning and generative AI solutions supporting semiconductor ma...
Date Posted: 08/09/2026 Recommended
-
Cloud Operations Engineer
Anywhere
Description: Remote Our client seeks a Cloud Operations Engineer to manage and execute cloud infrastructure, application, and data rehydration activities across Azure and AWS. The role supports business continuity, enterprise security standards, disast...
Date Posted: 09/01/2026 Recommended
-
IT Specialist
San Francisco, CA
Description: On-site in either San Francisco, CA or Austin, TX We're seeking an onsite IT Specialist for our client's office in either San Francisco or Austin, TX to manage their technology infrastructure and support a growing team. You'll be the point...
Date Posted: 08/19/2026 Recommended
-
Snowflake Developer – .NET / SSIS
4100 Coca Cola Plaza
Description: Hybrid 4/1 in Charlotte, NC Our client seeks a Snowflake Developer with .NET / SSIS to design and deliver enterprise integrations, ETL pipelines, and API-based solutions supporting Sales, Service, and Distribution. The role emphasizes Snow...
Date Posted: 08/09/2026 Recommended
-
Principal Full Stack Engineer
Salem, NH
Description: On-site Every Other Week onsite / 5 days in either Physical Location or Salem, NH Our client seeks a Principal Full Stack Engineer to design and deliver modern web applications and the CI/CD automation that ships them. The role emphasizes ...
Date Posted: 08/16/2026 Recommended
-
Staff (Lead) Software Engineer
Burbank, CA
Description: Hybrid 4 Days a week on-site in Burbank, CA Our client seeks a Staff (Lead) Software Engineer to build the next generation of intelligent infrastructure for the Studio Digital Supply Chain. The role blends backend engineering, workflow, an...
Date Posted: 08/07/2026 Recommended
-
SharePoint Migration Engineer
Pittsburgh, PA
Description: Hybrid 4 days onsite in either Pittsburgh, PA or Lake Mary, FL Our client seeks a SharePoint Migration Engineer to lead strategy and execution for a large-scale Microsoft 365 migration. The role will analyze legacy collaboration platforms,...
Date Posted: 08/12/2026 Recommended
-
Data Engineer & AI Strategist
Richardson, TX
Description: On-site in Richardson, TX Our client seeks a Data Engineer & AI Strategist to own the enterprise data model, lead the future-state data environment, govern the BI reporting layer, and drive the AI integration roadmap. The role will partner...
Date Posted: 08/25/2026 Recommended
-
Business Systems Analyst (BSA)
Anywhere
Description: Remote Our client is seeking a Business Systems Analyst to support the design, evaluation, configuration, and implementation of AI-powered workforce solutions and manager experiences. The role spans business analysis, solution architecture...
Date Posted: 08/11/2026 Recommended
-
AI Scanning Product Owner
Anywhere
Description: Remote Our client seeks a Senior Product Owner to define, prioritize, and drive the roadmap for an AI-driven code vulnerability detection and reporting capability. The product leverages large language models and automation to identify pote...
Date Posted: 08/26/2026 Recommended
-
P2 Application Support Engineer
Austin, TX
Description: Hybrid Monday - Thursday. Friday is remote in Austin, TX Our client seeks a P2 Application Support Engineer to join a second-level support team responsible for stability, reliability, and performance of a financial technology platform supp...
Date Posted: 09/01/2026 Recommended
-
Full Stack Software Engineer - API Platform Engineering
Greenwood Village, CO
Description: Hybrid 4 days onsite, 1 remote in Greenwood Village, CO Our client seeks a Full Stack Software Engineer to build and operate a modern API platform. The team treats APIs as products with clear contracts, observability, documentation, and ow...
Date Posted: 08/24/2026 Recommended
-
Senior Oracle Fusion GL Security & Technical Consultant
Dallas, TX
Description: On-site in Dallas, TX Our client seeks a hands-on senior Oracle Fusion GL Security and Technical Consultant to stabilize the Oracle security model, correct role and user-assignment issues, resolve production and hypercare tickets, and help...
Date Posted: 08/06/2026 Recommended
-
Client Risk Analyst
Anywhere
Description: Remote The Client Risk Analyst serves as a critical liaison between clients, sales teams, product teams, and information security stakeholders to evaluate client control requirements, assess risk implications, and provide defensible, compl...
Date Posted: 08/26/2026 Recommended
-
Director of Cloud Infrastructure and Engineering
Owing Mills, MD
Description: Hybrid up to three days per week from home in either Owing Mills, MD or Baltimore, MD Our client seeks a Director of Cloud Infrastructure and Engineering to lead a globally distributed team that designs, develops, and deploys cloud infrast...
Date Posted: 09/01/2026 Recommended
-
Lead Software Engineer
Los Angeles, CA
Description: Hybrid Fully Remote until West LA office opens - then 3x a week onsite in Los Angeles, CA Our client is seeking a highly skilled and motivated Lead Software Engineer to join their BaaS team, supporting partner onboarding and BaaS platform ...
Date Posted: 08/20/2026 Recommended
-
Computer Systems Analyst
Woodlawn, MD
Description: Hybrid 1 day per month (1st Monday of each mo) in Woodlawn, MD Transform technology into opportunity as a Systems Analyst for our client. A career in enterprise IT means connecting and enhancing the systems that matter most. You will help ...
Date Posted: 08/30/2026 Recommended
-
Communication Specialist II
Charlotte, NC
Description: Hybrid 3 On in Charlotte, NC Our client seeks a Communication Specialist II to support leadership engagement planning, communications development, and operational execution for senior leadership meetings and enterprise-wide events. The rol...
Date Posted: 08/30/2026 Recommended
-
Senior AWS Cloud Architect/Engineer
Reston
Description: On-site in Reston, VA As a Senior AWS Cloud Architect/Engineer, you will be a key player in architecting, designing, and implementing cloud solutions that empower our clients to leverage the full potential of cloud technologies. You will b...
Date Posted: 08/25/2026 Recommended
-
Sr. MuleSoft Platform Developer
Anywhere
Description: Remote Our client is seeking an experienced Senior MuleSoft Engineer to join the integration platform team. This is a hands-on, technical role serving as the platform owner for a MuleSoft portfolio, driving technical delivery and moderniza...
Date Posted: 08/25/2026 Recommended
-
Fullstack Software Engineer IV
Charlotte, NC
Description: Hybrid Charlotte, NC Our client seeks a Backend-focused Fullstack Software Engineer to accelerate delivery within the Emerging Digital organization. The role will support the ACE workflow application, which relies on Temporal workflows and...
Date Posted: 08/24/2026 Recommended
-
Service Team Specialist
Boston, MA
Description: On-site in Boston, MA Our client seeks a Service Team professional who will resolve customer requests and incidents with high standards of technical quality and customer service. The role will also support projects that address emerging te...
Date Posted: 08/09/2026 Recommended
Eliassen Group is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status. Eliassen Group’s Affirmative Action Plan (AAP) is available for inspection by any employee or applicant for employment upon request, during normal business hours of Monday through Friday, 8:30am to 5:30pm EST. Interested persons should contact Phaedra Wells at pwells@eliassen.com for assistance. It is unlawful in Massachusetts and Maryland to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
Applicants with disabilities that believe they require an accommodation or assistance with a position, please email our HR team at hradmin@eliassen.com. This email inbox is designed exclusively to assist job seekers whose disability prevents them from being able to apply online. Emails sent for other purposes will not receive a response.
Please be advised that a number of fraudulent job postings have been released under the Eliassen Group brand.
Unfortunately, fraudulent job postings can happen. If anyone reaches out to you about an open position connected with Eliassen Group, never provide personal or financial information to anyone who is not clearly associated with Eliassen Group
If anyone seemingly from Eliassen Group has ever requested this personal information in the past or does so in the future, please contact fraud@eliassen.com.
Please ensure that you are working directly with us by confirming the following:
- When you work with Eliassen Group, all email communication will come from an Eliassen.com address, never Gmail, Yahoo, etc.
- Eliassen Group will never ask you for personal information (home address, bank account, or check routing number) until you have worked with someone clearly associated with Eliassen Group, as indicated above