IAM Engineer - Entra ID

Your opportunity

At Schwab, you’re empowered to make an impact on your career. Here, innovative thought meets creative problem solving, helping us “challenge the status quo” and transform the finance industry together.

We believe in the importance of in-office collaboration and fully intend for the selected candidate for this role to work on site in the specified location(s).

We are seeking an Entra IAM Engineer at the associate level who has a foundational understanding of Microsoft Entra ID, Azure and Identity & Access Management (IAM) concepts along with Active Directory . This role will support the design, implementation, and day‑to‑day operations of identity services while developing hands‑on experience with modern identity security practices.

This is an excellent opportunity for someone looking to grow into a senior IAM or security engineering role.

Key Responsibilities Microsoft Entra ID

• Assist in configuring and maintaining:
• Users, groups, and roles
• Enterprise applications and SSO integrations
• MFA and basic/custom Conditional Access policies
• Support onboarding of applications using SAML, OIDC, or OAuth (with guidance).
• Monitor Entra ID sign‑in activity and security alerts and escalate when needed.

IAM Principles & Governance

• Apply IAM for best practices such as least privilege, role‑based access, and separation of duties.
• Support identity changes through established change management and control processes in lower and production environments.
• Support identity lifecycle processes including provisioning, modification, and deprovisioning of access.
• Support access reviews, audits, and compliance activities.
• Follow identity standards, procedures, and security baselines.

Documentation & Collaboration

• Create and update technical documentation, runbooks, and standard operating procedures.
• Working closely with senior IAM engineers, security teams, and IT support teams.
• Participate in incident response and root‑cause analysis related to identity issues.

What you have

Required Qualifications

• 1-3 years of experience in IT, security, or systems administration (or equivalent internship / lab experience).

• Foundational knowledge of
• Microsoft Entra ID (Azure AD)
• Active Directory concepts (users, groups, OUs, GPOs, authentication)
• Basic IAM principles and access control models
• Understanding authentication concepts such as MFA, passwords, and SSO.
• Familiarity with common identity protocols (basic understanding is sufficient):
• SAML, OAuth2, OpenID Connect
• Basic scripting or automation exposure (PowerShell preferred).
• Willingness to learn about modern identity and security technologies.

Preferred Qualifications

• Exposure to hybrid identity environments using Active Directory and Entra Connect.
• Familiarity with Infrastructure as Code (IaC) concepts and exposure to Terraform, particularly for managing identity‑related resources.
• Microsoft certifications or in progress:
• SC‑300, AZ‑900, SC‑900, or similar
• Interest in identity security, Zero Trust, and cloud security.

What’s in it for you At Schwab, you’re empowered to shape your future. We champion your growth through meaningful work, continuous learning, and a culture of trust and collaboration—so you can build the skills to make a lasting impact. Our Hybrid Work and Flexibility approach balances our ongoing commitment to workplace flexibility, serving our clients, and our strong belief in the value of being together in person on a regular basis.

We offer a competitive benefits package that takes care of the whole you – both today and in the future:

• 401(k) with company match and Employee stock purchase plan
• Paid time for vacation, volunteering, and 28-day sabbatical after every 5 years of service for eligible positions
• Paid parental leave and family building benefits
• Tuition reimbursement
• Health, dental, and vision insurance