Information and Access Management Engineer

Job Description Summary

Raymond James Information Security is seeking a Security Engineer for the IAM Engineering: IGA (Directory Services) team within the Identity and Access Management Organization. This important role involves supporting a team of IAM security engineers in managing key enterprise security platforms, including Microsoft Active Directory, Microsoft Entra ID, and Infoblox. The Security Engineer will contribute to the implementation and maintenance of IAM systems, assist in operational activities, and participate in IAM-related projects.
This position plays a vital role in executing the Identity and Access Management product roadmap, with a focus on risk reduction, business enablement, operational efficiency, and security compliance.

Job Description

Responsibilities:

• Strong MS Active Directory; MS Entra ID and AWS experience required

• Strong communication and collaboration skills are required, with the ability to work independently and as part of a team.

• Support and maintain Active Directory; Entra ID and DNS/DHCP/IPAM system-based processes.

• Assist in defining and implementing AD; Entra ID and DNS/DHCP/IPAM support procedures.

• Work on Operational Engineering Tasks – Tickets; Incidents; Change Requests; Vulnerabilities; Maintenance Tasks.

• Provide technical input on IAM technologies, policies, and compliance requirements.

• Participate in IAM-related projects using established methodologies and contribute to project deliverables.

• Participate in Enterprise Disaster Recovery Exercises; and On-Call rotations with the IAM-IGA Team.

• Recommend and implement technical improvements to enhance security and operational efficiency.

• Collaborate with stakeholders to understand business requirements and translate them into technical solutions.

• Develop and maintain system documentation, including flow charts, diagrams, and specifications.

• Document current and future state processes and assist in planning transitions.

• Support AD, Entra ID and DNS / DHCP / IPAM system-based processes:

  • Define and implement support procedures.

  • Manage business requirements and process documentations.

  • Write/review system specifications, output requirements, flowcharts and technical diagrams.

Required Technical skillsets:

• Minimum 5 years working experience with Active Directory, Entra ID, AWS, and DNS / DHCP / IPAM.

• Proven hands-on experience with IAM (Hybrid & Cloud environments), AWS and related tools/technologies.

• Proven hands-on experience with networking solutions such as DNS / DHCP / IPAM.

• Strong and proven scripting and automation skills using PowerShell, etc.

• Enterprise level experience is required - Financial Services experience is preferred.

• Additional skills - Event/log analysis and troubleshooting; System monitoring and event analysis.

Education

Bachelor’s: Computer and Information Science, High School (HS) (Required)

Work Experience

General Experience - 3 to 6 years

Certifications

Salary Range

$70,000.00-$110,000.00

Travel

Less than 25%

Workstyle

Hybrid

At Raymond James our associates use five guiding behaviors (Develop, Collaborate, Decide, Deliver, Improve) to deliver on the firm's core values of client-first, integrity, independence and a conservative, long-term view. 
We expect our associates at all levels to:
•  Grow professionally and inspire others to do the same
•  Work with and through others to achieve desired outcomes
•  Make prompt, pragmatic choices and act with the client in mind
•  Take ownership and hold themselves and others accountable for delivering results that matter
•  Contribute to the continuous evolution of the firm

At Raymond James – as part of our people-first culture, we honor, value, and respect the uniqueness, experiences, and backgrounds of all of our Associates.  When associates bring their best authentic selves, our organization, clients, and communities thrive. The Company is an equal opportunity employer and makes all employment decisions on the basis of merit and business needs. 

#LI-TC1