IAM and RBAC Engineer

- Design and uphold an enterprise Azure RBAC role taxonomy while documenting role-permission mappings and modifications. - Connect permissions to roles to enforce least-privilege access through security groups and role assignments, avoiding broad direct privilege allocations. - Implement Just-in-Time workflows for elevated access with approval processes and time-limited permissions utilizing PIM. - Set up usage restrictions and configuration standards for VPNs, jump hosts, and privileged session management. - Define and oversee procedures for emergency access, incident notifications, and post-incident reviews. - Configure Multi-Factor Authentication for privileged roles using strong authentication methods like smartcards or security keys. - Provision Azure AD administrator roles for relevant services such as SQL as needed. - Enforce managed identities for applications to decrease dependency on local service keys. - Ensure users keep issued authenticators secure and prevent unencrypted static credentials in code, images, and configurations. - Write and maintain policies, standards, and procedural documentation for access controls. - Perform regular access reviews and assist in collecting evidence for audits. - Maintain inventory of assets and data, ensuring baseline configurations align with configuration management practices. - Configure Azure-native monitoring and logging for identity and access events, directing alerts to service owners and security teams. - Verify the use of emergency access through incident workflows and facilitate audit readiness for access-related controls.