IAM Engineer - MFA

Summary :

We are seeking a highly capable IAM Engineer with hands-on experience in designing, implementing, and supporting enterprise-grade multi-factor authentication (MFA) solutions. This role focuses primarily on Azure MFA , with additional exposure to Okta MFA , CyberArk MFA , and Privileged Access Management (PAM) solutions.

You will be responsible for securing user access, integrating MFA with identity platforms, and supporting governance and compliance initiatives across hybrid cloud environments.

Key Responsibilities :

Lead the deployment, configuration, and administration of Azure MFA across cloud and hybrid infrastructures.

Integrate MFA with Microsoft Entra ID (Azure AD) , on-prem Active Directory, VPNs, Microsoft 365, and third-party applications.

Design and implement Conditional Access Policies , manage authentication methods, and support passwordless authentication strategies.

Troubleshoot MFA-related issues in collaboration with internal teams and external vendors to enhance user experience.

Conduct health checks and generate reports on MFA adoption, authentication trends, and enrollment status.

Participate in broader Identity and Access Management (IAM) initiatives, including Zero Trust adoption and least privilege enforcement.

Provide incident support, including authentication log analysis, token troubleshooting, and user onboarding.

Contribute to the development and enforcement of MFA governance policies, access reviews, and exception management.

Support internal and external compliance audits by providing evidence of MFA enforcement and access controls.

Create user-facing documentation and deliver training on MFA best practices and self-service tools.

Stay updated on evolving authentication technologies, threat intelligence, and vendor roadmap developments.

Technical Skills & Experience :

Essential :

2–3 years of experience implementing and supporting enterprise MFA solutions.

Strong knowledge of identity protocols such as SAML , OAuth , OpenID Connect , and directory services .

Hands-on experience with at least 2 of the following technologies is required :

Azure MFA (Microsoft Entra ID / Azure AD)

Okta Adaptive MFA

CyberArk MFA

Conditional Access Policies

Microsoft 365 Identity & Access Management

MFA integration with VPNs and third-party apps

ITSM integration for access workflows and exceptions

Privileged Access Management (PAM), particularly CyberArk

Preferred Certifications :

Microsoft SC-300 or MS-500

Okta Certified Professional

CyberArk Defender

Role Expectations :

Applies advanced subject matter expertise in identity security, authentication, and privileged access management.

Provides solutions to complex issues involving authentication flows, user behavior, and system integrations.

Makes informed decisions independently within policy frameworks to deliver secure and seamless access experiences.

Offers technical leadership on cross-functional initiatives and works closely with IAM, cybersecurity, and infrastructure teams.

Mentors junior engineers and supports the continuous improvement of internal processes and standards.

Represents the organization in vendor discussions and client-facing engagements related to authentication and access control.

Learn more about DXC's Security team -

Instagram : Youtube :

TikTok :

Website

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.