Senior IAM Data Engineer with Entra ID experience to support a Global Identity and Access Management Team with one of our major banking clients- 39670

Senior IAM Data Engineer with Entra ID experience to support a Global Identity and Access Management Team with one of our major banking clients- 39670

Location Address: Hybrid - Scarborough - 2 days in the office. Subject to change.

Contract Duration: 6 Months (Possibility of extension)

Schedule Hours: 9 am-5pm Monday-Friday; standard 37.5 hrs/week

Story Behind the Need

Business group:

The Global Identity & Access Management (IAM) organization defines and executes the enterprise IAM strategy, roadmap, and security control framework across the bank globally. This includes Identity Lifecycle Management, centralized provisioning, access governance, privileged access management, strong authentication (MFA), Single Sign-On (SSO), and integration of IAM solutions.

Notes: Contractor will be helping out first of all with the rollout plans, data analysis on the rollout and how the rollout migration is going through. That's going to be their first. Besides that, the second priority would be to build detailed dashboards, tabular information that would be presented to VPs and upper management regularly.

Project: Most of the job would be working with clients to help onboard their application from VAM to Entra.

They will be enabling single sign-on for applications, like we have about 304 in the application that need to be completed. So they will be working with the clients to basically enable authentication and the single sign-on for these applications in Entra.

Candidate value preposition.

The IAM Data Engineer plays a critical role in supporting the enterprise-wide Identity and Access Management (IAM) program by engineering data solutions, enabling MFA and application migrations, and ensuring seamless user experiences across global business units. This role partners closely with Architecture, Engineering, AD, GTEP, LAM, ServiceNow, and application teams to deliver high‑quality identity data, reporting, and rollout execution for Entra ID, MFA, VPN, VDI, and other IAM initiatives.

Daily activities:

Identity Data Engineering & Architecture Alignment

Collaborate with IAM Architects and Engineering teams to understand Entra ID architecture, configuration, policies, and process flows.

Map application attributes with Entra ID attributes to support seamless application migration and integration.

Work with AD, GTEP, and LAM teams to support provisioning, deprovisioning, and identity data cleanup across systems.

Partner with Microsoft to troubleshoot and resolve Entra ID issues related to authentication, policies, and reporting.

User & Device Data Integration

Analyze and understand global user personas, including subsidiaries, branches, and contact centers, and the MFA methods applied to each.

Integrate user and hardware attributes from ServiceNow, LAM, and other systems to create unified identity datasets.

Conduct data discovery and tracking for users and devices to support migrations for VPN, VDI, and other IAM solutions.

Dashboarding, Reporting & Logic Development

Work with developers to design and build dashboards that consolidate identity, MFA, device, and application data.

Define and implement logic to simplify reporting for MFA registration, rollout progress, and application migration.

Provide regular reports on MFA registration, user migration status, and rollout performance.

MFA Rollout & User Migration Execution

Define rollout waves for MFA enablement and application onboarding in parallel with business timelines.

Develop detailed rollout plans for user groups across global regions and business units.

Apply conditional access policies to users after successful MFA completion.

Work closely with internal customers to understand MFA requirements and support them through authentication setup, troubleshooting, and communication.

Provide training and hands‑on support to new users adopting MFA.

Partner with the communication team to extract data, refine messaging, and coordinate user communications.

Cross‑Team Collaboration & Application Migration

Work with application teams, including PAM, to support migrations such as Centrify to CyberArk.

Collaborate with VPN operations teams to troubleshoot MFA‑related access issues and provide executive‑level support when needed.

Partner with QA teams to review and validate test cases for user and application migration scenarios.

Quality Assurance, Governance & Continuous Improvement

Ensure identity data quality, consistency, and accuracy across Entra ID, AD, ServiceNow, and other systems.

Maintain documentation for data mappings, rollout plans, dashboards, and migration processes.

Gather feedback from end users and stakeholders to continuously improve MFA rollout and migration processes.

Must-have requirements:

• 10 years of experience with data engineering tools (SQL, Python, ETL/ELT pipelines, data modeling).

• 3-4 years of experience with Entra ID (Azure AD), MFA, Conditional Access, and identity lifecycle concepts.

• Experience building dashboards using Power BI or similar tools.

Nice-To-Have Skills:

• Familiarity with Active Directory, ServiceNow, and enterprise identity data structures.

• Strong understanding of IAM concepts, including MFA, SSO, Conditional Access, RBAC, and identity governance.

• Experience with large‑scale MFA, VPN rollouts or identity migrations.

• Familiarity with Microsoft Entra reporting, Graph API, and identity insights.

Best VS. Average Candidate:

The best candidate is someone who has worked on large-scale migration and is able to support rollouts, data, and data analysis. So that will be the best candidate versus the average candidate is someone who has worked on small-scale rollouts and just has experience with VPN, but hasn't worked on enterprise-level rollouts.

Candidate Review & Selection

1- Video- 60 mins - architect and Entra specialist - technical questions, go through experience and role overview.

2nd round Video- 30 mins -HM - cultural fit and situational questions.