{"id":2040288,"url":"https://alion.io/job/evolent-sr-engineer-identity-access-management","title":"Sr Engineer, Identity & Access Management","company":{"id":1040035,"name":"Evolent","domain":"evolent.com","url":"https://alion.io/company/evolent","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":100,"open_postings":3,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":8,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":14500,"max_usd":32000,"period":"year","method":"role_seniority_country_cell","sample_n":10},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AI Agents","optional":false},{"name":"Azure","optional":false},{"name":"Function Calling","optional":false},{"name":"IAM","optional":false},{"name":"ITSM","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"RAG","optional":false},{"name":"Zero Trust","optional":false},{"name":"Copilot Studio","optional":true}],"status":"live","first_seen_at":"2026-10-07T17:39:01Z","employer_posted_date":"2026-10-07","last_verified_at":"2026-10-12T15:30:34Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Your Future Evolves Here\nEvolent partners with health plans and providers to achieve better outcomes for people with most complex and costly health conditions. Working across specialties and primary care, we seek to connect the pieces of fragmented health care system and ensure people get the same level of care and compassion we would want for our loved ones.\nEvolent employees enjoy work/life balance, the flexibility to suit their work to their lives, and autonomy they need to get things done. We believe that people do their best work when they're supported to live their best lives, and when they feel welcome to bring their whole selves to work. That's one reason why diversity and inclusion are core to our business.\nJoin Evolent for the mission. Stay for the culture.\nWhat You’ll Be Doing:\nJob Summary\nThis role designs, implements and continuously improves identity and access management (IAM) capabilities across Microsoft Entra ID, Active Directory and adjacent platforms, with particular focus on role-based access control (RBAC), conditional access, privileged access and identity governance. The engineer builds automation and agentic AI solutions-such as access-review and role-mining agents-to reduce manual administrative overhead and strengthen the organization’s zero-trust security posture. The engineer collaborates with security, compliance and platform teams to ensure identity controls align with company policy and applicable regulations.\nEssential Functions\nDesign, implement and operate IAM capabilities including RBAC, conditional access, privileged identity management (PIM), and entitlement management\nWrite and maintain scripts and integrations (PowerShell, Python, Microsoft Graph API, or similar) for identity provisioning, access reviews, certification workflows and reporting\nDesign, build and deploy agentic AI solutions (e.g., a role-mining agent) that analyze access patterns, recommend least privilege role assignments and automate periodic access certification\nIntegrate IAM systems with adjacent technologies (endpoint management, security operations, ITSM, directory services) to support end-to-end identity lifecycle management\nMonitor and report on identity-related security anomalies and support incident response and remediation for identity-based threats\nSupport audit readiness by producing and maintaining documentation of IAM design, controls, and automation\nCreate, publish and communicate knowledgebase articles and standard operating procedures for IAM processes\nAct as a mentor to junior engineers and operations teams on IAM for best practices, secure coding and responsible use of AI-driven automation\nRequired Qualifications\n7+ years managing or supporting identity and access management, identity governance, or related security platforms\n3+ years of hands-on experience with Microsoft Entra ID (Azure AD), RBAC design, conditional access and privileged identity management (PIM)\nDemonstrated coding/scripting ability (PowerShell, Python, Microsoft Graph API, or similar) with a track record of building identity automation, integrations and reporting tools\nHands-on experience designing or deploying agentic AI or automation solutions for identity/access use cases (e.g., role mining, access certification, anomaly detection)\nExperience with identity protocols and standards (SAML, OAuth/OIDC, SCIM) and identity governance/compliance frameworks\nWorking knowledge of Generative AI and agentic AI concepts (LLM integration, tool/function calling, retrieval-augmented generation) as applied to identity and security operations\nAbility to write clear technical documentation\nPreferred Qualifications\nExperience building or contributing to an internal AI agent/Center of Excellence pod, including agent design and application lifecycle management (ALM) practices\nExperience with Microsoft Copilot Studio or similar low-code AI agent platforms\nPassion for zero-trust security with an awareness of the latest identity and AI trends\nPreferred Education\nBachelor’s degree in IT, Computer Science, or related field\nPreferred Certifications\nMicrosoft Certified: Identity and Access Administrator Associate (SC-300)\nMicrosoft Certified: Azure AI Engineer Associate (AI-102) or Copilot Studio/agentic AI certification\nGeneral Performance Criteria\nAs the Sr Engineer, Identity & Access Management, you will be required to fulfill your responsibilities while meeting the following general performance criteria for this position at this level:\nExpertise: You research, create proof of concepts, and introduce new methods\nCommunication: You guide others through problem solving whether it is a technical issue, project impediment, or conflict\nDomain: [redacted]  You question the status quo in a constructive manner to find areas for the team to improve\nInfluence: You regularly make an impact to your entire team\nTo ensure a secure hiring process we have implemented several identity verification steps, including submission of a government issued photo ID. We conduct identity verification during interviews, and final interviews may require onsite attendance. All candidates must complete a comprehensive background check, in-person I-9 verification, and may be subject to drug screening prior to employment. The use of artificial intelligence tools during interviews is prohibited and monitored. Misrepresentation will result in immediate disqualification from consideration.\nMandatory Requirements:\nEmployees must have a high-speed broadband internet connection with a minimum speed of 50 Mbps and the ability to set up a wired connection to their home network to ensure effective remote work. These requirements may be updated as needed by the business.\nEvolent is an equal opportunity employer and considers all qualified applicants equally without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, or disability status. If you need reasonable accommodation to access the information provided on this website, please contact  for further assistance.\nThe expected base salary/wage range for this position is $. As part of our total compensation package, Evolent is proud to offer comprehensive benefits (including health insurance benefits) to qualifying employees. All compensation determinations are based on the skills and experience required for the position and commensurate with experience of selected individuals, which may vary above and below the stated amounts.","description_format":"text","description_chars":6506,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Health insurance"],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Biotechnology","Sports","Care Coordination & Population Health","Health Insurance & Benefits"],"lifecycle":[{"event":"open","at":"2026-10-07T17:39:01Z"}],"visa":[],"liveness":{"score":85,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":0.945,"age_days":4,"expected_fill_days":8,"reasons":["conf:3","velocity","win:mid"],"computed_at":"2026-10-12T06:55:09Z"},"pay":null,"html_url":"https://alion.io/job/evolent-sr-engineer-identity-access-management","json_url":"https://alion.io/job/evolent-sr-engineer-identity-access-management.json","meta":{"generated_at":"2026-10-12T21:38:44Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":35289,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1040035},"rest":"https://alion.io/mcp/rest/get_company?id=1040035"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fevolent-sr-engineer-identity-access-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fevolent-sr-engineer-identity-access-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fevolent-sr-engineer-identity-access-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/evolent-sr-engineer-identity-access-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fevolent-sr-engineer-identity-access-management"}]}